baserCMS Fixes Cross-Site Scripting Vulnerability in Content Management Feature
CVE-2024-26128

5.4MEDIUM

Key Information:

Vendor

Baserproject

Status
Basercms
Vendor
CVE Published:
22 February 2024

What is CVE-2024-26128?

baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the content management feature. Version 5.0.9 contains a fix for this vulnerability.

Affected Version(s)

basercms < 5.0.9

References

https://github.com/baserproject/basercms/security/advisor...
x_refsource_CONFIRM
https://github.com/baserproject/basercms/commit/18f426d63...
x_refsource_MISC
https://basercms.net/security/JVN_73283159
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.