Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1qanhxLW04aDMtNHZ3Nc4AA5dh

baserCMS Cross-site Scripting vulnerability in Content Management

There is a XSS Vulnerability in Content Management Feature to baserCMS.

Target

baserCMS 5.0.8 and earlier versions

Vulnerability

Malicious code may be executed in Content Management Feature.

Countermeasures

Update to the latest version of baserCMS

Please refer to the following page to reference for more information.
https://basercms.net/security/JVN_73283159

Permalink: https://github.com/advisories/GHSA-jjxq-m8h3-4vw5
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qanhxLW04aDMtNHZ3Nc4AA5dh
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: 2 months ago
Updated: 2 months ago

CVSS Score: 5.4
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Identifiers: GHSA-jjxq-m8h3-4vw5, CVE-2024-26128
References:

• https://github.com/baserproject/basercms/security/advisories/GHSA-jjxq-m8h3-4vw5
• https://github.com/baserproject/basercms/commit/18f426d63e752b4d22c40e9ea8d1f6e692ef601c
• https://basercms.net/security/JVN_73283159
• https://nvd.nist.gov/vuln/detail/CVE-2024-26128
• https://github.com/advisories/GHSA-jjxq-m8h3-4vw5

Repository: https://github.com/baserproject/basercms
Blast Radius: 3.3

Affected Packages