CVE-2024-46994 MEDIUM

CVE-2024-46994: baserCMS has Cross-site Scripting Vulnerability in Blog posts and Contents list Feature

Vendor Baserproject

Product basercms

Weakness CWE-79 · XSS

Published October 24, 2024

Last update October 24, 2024

View on NVD All CVEs

CVSS base score

5.4/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog posts and Contents list Feature. Version 5.1.2 fixes this issue.

Key dates

02Disclosure timeline

October 24, 2024 CVE published

October 24, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-46994 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

CVE-2024-46994: baserCMS has Cross-site Scripting Vulnerability in Blog posts and Contents list Feature

01Description

02Disclosure timeline

03References

04Related CVE