Lucene search

Veracode Vulnerability DatabaseVERACODE:45622

HistoryFeb 23, 2024 - 1:47 p.m.

Cross Site Scripting (XSS)

2024-02-2313:47:12

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

baserproject

basercms

xss

vulnerability

functionality

input validation

malicious scripts

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

baserproject/basercms is vulnerable to Cross Site Scripting (XSS). The vulnerability is due to inadequate input validation, allowing attackers to inject malicious scripts into the search functionality.

CPENameOperatorVersion
baserproject/basercmsle5.0.9
baserproject/basercmsle5.0.9

CPE	Name	Operator	Version
	baserproject/basercms	le	5.0.9
	baserproject/basercms	le	5.0.9

References

basercms.net/security/JVN_73283159

github.com/baserproject/basercms/commit/18549396e5a9b8294306a54a876af164b0b57da4

github.com/baserproject/basercms/security/advisories/GHSA-66c2-p8rh-qx87

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

Related for VERACODE:45622