baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components are: content_fields.php, content_info.php, content_options.php, content_related.php, index_list_tree.php, jquery.bcTree.js. The issue is fixed in version 4.3.7.
References
Link | Resource |
---|---|
https://basercms.net/security/20200827 | Patch Vendor Advisory |
https://github.com/baserproject/basercms/security/advisories/GHSA-cpxc-67rc-c775 | Patch Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: GitHub_M
Published: 2020-08-28T21:10:14
Updated: 2020-08-28T21:10:14
Reserved: 2020-06-25T00:00:00
Link: CVE-2020-15154
JSON object: View
NVD Information
Status : Analyzed
Published: 2020-08-28T21:15:11.917
Modified: 2020-09-03T18:08:22.913
Link: CVE-2020-15154
JSON object: View
Redhat Information
No data.
CWE