Stored Cross-Site Scripting Vulnerability in baserCMS by baserCMS Community
CVE-2022-41994

4.8MEDIUM

Key Information:

Vendor

Basercms Users Community

Status
Basercms
Vendor
CVE Published:
7 December 2022

What is CVE-2022-41994?

A stored cross-site scripting vulnerability exists in the permission settings of baserCMS, affecting all versions prior to 4.7.2. An authenticated attacker with administrative privileges can exploit this flaw to inject arbitrary scripts into the application. If successful, this could lead to malicious scripts being executed in the context of the user's browser, potentially compromising sensitive data or leading to further security breaches.

Affected Version(s)

baserCMS versions prior to 4.7.2

References

https://basercms.net/security/JVN_53682526
https://jvn.jp/en/jp/JVN53682526/index.html

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.