CVE-2021-20683

MEDIUM

Cross-site Scripting (XSS) in baserCMS

Title source: GitHub Advisory
STIX 2.1 vulnerability

Record summary

CVE-2021-20683 has a selected CVSS score of 5.4 (medium).

Description

Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.

Description source: CVE List

Affected products and versions

2
ProductSourceVersion range

baserCMS

Browse baserCMS Users Community / baserCMS
CVE Listversions prior to 4.4.5affected

baserproject/basercms

Browse Packagist / baserproject/basercms
GitHub AdvisoryBefore 4.4.5 · Fixed in 4.4.5affected

References

4