CVE-2018-0570: XSS in baserCMS
Summary
CVE-2018-0570: XSS in baserCMS. Affects baserproject/basercms across 2 version ranges.
< 3.0.15
>= 4.0.0, <= 4.1.0.1
No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
baserCMS is an open-source content management system (CMS) developed by baserproject. It provides a platform for creating and managing websites, allowing users to easily publish and organize content. The CMS is widely used and has a large user base. However, versions 4.1.0.1 and earlier, as well as versions 3.0.15 and earlier, are vulnerable to a cross-site scripting (XSS) attack.
Vulnerability Detail
The vulnerability in baserCMS allows remote authenticated attackers to inject arbitrary web script or HTML through unspecified vectors. This means that an attacker with valid credentials can exploit the vulnerability to execute malicious code on the affected website. The impact of this vulnerability can range from defacement of the website to the theft of sensitive user information. The vulnerability has a CVSS score of 5.4, indicating a moderate severity level.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to upgrade to a non-affected version as mentioned in the 'how_to_fix' section.
Conclusion
In conclusion, baserCMS versions 4.1.0.1 and earlier, as well as versions 3.0.15 and earlier, are vulnerable to a cross-site scripting (XSS) attack. It is crucial to upgrade to a non-affected version of baserCMS to mitigate the risk of exploitation. For further assistance and support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for baserproject/basercms →
FAQ
baserCMS is an open-source content management system developed by baserproject. It provides a platform for creating and managing websites.
The vulnerability allows remote authenticated attackers to inject arbitrary web script or HTML, which can lead to various consequences such as website defacement or theft of sensitive user information.
To fix the vulnerability, it is recommended to upgrade to a non-affected version of baserCMS. Refer to the 'how_to_fix' section for detailed instructions.
No specific workaround is mentioned for this vulnerability. Upgrading to a non-affected version is the recommended solution.
The CVSS score of this vulnerability is 5.4, indicating a moderate severity level.
Related vulnerabilities
Recent vulnerabilities recorded for baserproject/basercms.
