Cross-Site Scripting in baserCMS Affects Multiple Versions from baserCMS
CVE-2018-0570

5.4MEDIUM

Key Information:

Vendor

Basercms Users Community

Status
Basercms
Vendor
CVE Published:
26 June 2018

What is CVE-2018-0570?

A cross-site scripting vulnerability exists in baserCMS, impacting versions 4.1.0.1 and earlier, as well as 3.0.15 and earlier. This flaw allows remote authenticated attackers to inject arbitrary web scripts or HTML through unspecified vectors. If exploited, this vulnerability could compromise the integrity of user data, allowing attackers to execute malicious scripts in the context of a user's session.

Affected Version(s)

baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions)

References

https://basercms.net/security/JVN67881316
x_refsource_MISC
http://jvn.jp/en/jp/JVN67881316/index.html
third-party-advisoryx_refsource_JVN

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.