CVE-2021-20683
Cross-site Scripting (XSS) in baserCMS
概要
Cross-site Scripting (XSS) in baserCMS
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Packagist
baserproject/basercms
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.5"}]}]
参照URL
- advisory nvd.nist.gov
- web github.com
- web basercms.net
- web jvn.jp