CVE-2020-15154
Cross Site Scripting in baserCMS
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.3EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
28 Aug 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components are: content_fields.php, content_info.php, content_options.php, content_related.php, index_list_tree.php, jquery.bcTree.js. The issue is fixed in version 4.3.7.
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
Affected products
baserproject · basercmsWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →