baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog posts and Contents list Feature. Version 5.1.2 fixes this issue.
References
Link | Resource |
---|---|
https://basercms.net/security/JVN_00876083 | Vendor Advisory |
https://github.com/baserproject/basercms/security/advisories/GHSA-wrjc-fmfq-w3jr | Third Party Advisory |
Configurations
History
28 Oct 2024, 15:30
Type | Values Removed | Values Added |
---|---|---|
References | () https://basercms.net/security/JVN_00876083 - Vendor Advisory | |
References | () https://github.com/baserproject/basercms/security/advisories/GHSA-wrjc-fmfq-w3jr - Third Party Advisory | |
First Time |
Basercms basercms
Basercms |
|
CPE | cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:* |
25 Oct 2024, 12:56
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
24 Oct 2024, 19:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-10-24 19:15
Updated : 2024-10-28 15:30
NVD link : CVE-2024-46994
Mitre link : CVE-2024-46994
CVE.ORG link : CVE-2024-46994
JSON object : View
Products Affected
basercms
- basercms
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')