Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS02NmMyLXA4cmgtcXg4N84AA5dj

baserCMS Cross-site Scripting vulnerability in Site search Feature

There is a XSS Vulnerability in Site search Feature to baserCMS.

Target

baserCMS 5.0.8 and earlier versions

Vulnerability

Malicious code may be executed in Site search Feature.

Countermeasures

Update to the latest version of baserCMS

Please refer to the following page to reference for more information.
https://basercms.net/security/JVN_73283159

Permalink: https://github.com/advisories/GHSA-66c2-p8rh-qx87
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02NmMyLXA4cmgtcXg4N84AA5dj
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: 2 months ago
Updated: 2 months ago

CVSS Score: 6.1
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Identifiers: GHSA-66c2-p8rh-qx87, CVE-2023-44379
References:

• https://github.com/baserproject/basercms/security/advisories/GHSA-66c2-p8rh-qx87
• https://nvd.nist.gov/vuln/detail/CVE-2023-44379
• https://github.com/baserproject/basercms/commit/18549396e5a9b8294306a54a876af164b0b57da4
• https://basercms.net/security/JVN_73283159
• https://github.com/advisories/GHSA-66c2-p8rh-qx87

Repository: https://github.com/baserproject/basercms
Blast Radius: 3.7

Affected Packages