Cross-site scripting vulnerability in BaserCMS
CVE-2022-39325

4.6MEDIUM

Key Information:

Vendor

Baserproject

Status
Basercms
Vendor
CVE Published:
25 November 2022

What is CVE-2022-39325?

BaserCMS is a content management system with a japanese language focus. In affected versions there is a cross-site scripting vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. Users of baserCMS are advised to upgrade as soon as possible. There are no known workarounds for this vulnerability.

Affected Version(s)

basercms < 4.7.2

References

https://github.com/baserproject/basercms/security/advisor...
https://github.com/baserproject/basercms/commit/b6f8a54e9...
https://basercms.net/security/JVN_53682526

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.