CVE-2021-20681

Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors...

PT-2021-14140

Name of the Vulnerable Software and Affected Versions: baserCMS versions prior to 4.4.5 Description: The issue is related to improper neutralization of JavaScript input in the page editing function, allowing remote authenticated attackers to inject an arbitrary script via unspecified vectors...