JVN#67881316Third-party advisory
http://jvn.jp/en/jp/JVN67881316/index.html CVE-2018-0570
MEDIUM
XSS in baserCMS
Record summary
CVE-2018-0570 has a selected CVSS score of 5.4 (medium).
Description
Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
Description source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
| CVE List | (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) | affected | |
baserproject/basercmsBrowse Packagist / baserproject/basercms | GitHub Advisory | 4.0.0 to ≤ 4.1.0.1 | affected |
| Through 3.0.15 | affected |
References
4basercms.net
https://basercms.net/security/JVN67881316 github.com
https://github.com/baserproject/basercms nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2018-0570