Cross site scripting

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting XSS and Remote Code Execution RCE. This may be executed by logging in as a system administrator and uploading an executable script file such as a PHP file.The affected components are ThemeFilesController.php and...

CVE-2020-15159

CVE-2020-15159 affects baserCMS 4.3.6 and earlier. The vulnerability involves Cross Site Scripting (XSS) and Remote Code Execution (RCE) through arbitrary script uploads, exploitable by logging in as an administrator. Affected components are ThemeFilesController.php and UploaderFilesController.ph...

CVE-2020-15159 Cross Site Scripting leading to RCE in baserCMS

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting XSS and Remote Code Execution RCE. This may be executed by logging in as a system administrator and uploading an executable script file such as a PHP file.The affected components are ThemeFilesController.php and...

Cross Site Scripting and RCE in baserCMS

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting XSS and Remote Code Execution RCE. Impact: XSS to RCE via Arbitrary file upload. Attack vector is: Administrator must be logged in. Components are: ThemeFilesController.php, UploaderFilesController.php. Tested baserCMS Version : 4.3.6...