CVE-2020-15154 HIGH

CVE-2020-15154: Cross Site Scripting in baserCMS

Vendor Baserproject
Product basercms
Weakness CWE-79 · XSS
Published August 28, 2020
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

7.3/10
Attack vector Network
Attack complexity High
Privileges required High
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N

What the vulnerability does

01Description

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components are: content_fields.php, content_info.php, content_options.php, content_related.php, index_list_tree.php, jquery.bcTree.js. The issue is fixed in version 4.3.7.

Key dates

02Disclosure timeline

August 28, 2020 CVE published
August 4, 2024 Record updated