CVE-2021-20683
Cross-site Scripting (XSS) in baserCMS
Résumé
Cross-site Scripting (XSS) in baserCMS
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Packagist
baserproject/basercms
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.5"}]}]
Références
- advisory nvd.nist.gov
- web github.com
- web basercms.net
- web jvn.jp