GHSA-7w2v-35j3-xrm9MediumCVSS 4.8

baserCMS vulnerable to stored Cross-site Scripting

Published
December 7, 2022
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2022-42486 →

📋 Description

Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.

🎯 Affected products1

  • composer/baserproject/basercms:< 4.7.2

🔗 References (4)