Stored Cross-Site Scripting Vulnerability in BaserCMS by baserCMS
CVE-2022-42486

4.8MEDIUM

Key Information:

Vendor

Basercms Users Community

Status
Basercms
Vendor
CVE Published:
7 December 2022

What is CVE-2022-42486?

A stored cross-site scripting vulnerability exists within the user group management functionality of baserCMS, affecting versions before 4.7.2. This flaw permits remote authenticated attackers with administrative privileges to inject arbitrary scripts. If exploited, it could compromise the integrity and confidentiality of the application, allowing attackers to execute malicious scripts in the context of users accessing the site.

Affected Version(s)

baserCMS versions prior to 4.7.2

References

https://basercms.net/security/JVN_53682526
https://jvn.jp/en/jp/JVN53682526/index.html

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.