GHSA-vxwf-79ch-f7f7MediumCVSS 4.8

baserCMS vulnerable to stored Cross-site Scripting

Published
December 7, 2022
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2022-41994 →

📋 Description

Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.

🎯 Affected products1

  • composer/baserproject/basercms:< 4.7.2

🔗 References (4)