Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2018-0570

Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

VectorNETWORK

PublishedJun 26, 2018, 14:29

Published Byvultures@jpcert.or.jp

Base Score

Score5.4

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

baserproject/basercms(Packagist)4.0.0N/AN/A

baserproject/basercms(Packagist)0N/AN/A

References

http://jvn.jp/en/jp/JVN67881316/index.html
https://basercms.net/security/JVN67881316

Weakness Type

CWE-79

CVSS Metrics

Base Score

5.4

Vector String

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Base SeverityMedium

Version

3.0

Attack Vector (AV)

NETWORK