GHSA-66jv-qrm3-vvfg
baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | baserproject/basercms | < 5.1.2 | 5.1.2 |
Details
As written in the advisory (Markdown source, shown as plain text).
XSS vulnerability in Blog posts feature to baserCMS.
### Target
baserCMS 5.1.1 and earlier versions
### Vulnerability
Malicious code may be executed in Blog posts feature.
### Countermeasures
Update to the latest version of baserCMS
Please refer to the following page to reference for more information.
https://basercms.net/security/JVN_00876083
### Credits
Ayato Shitomi＠Fore-Z
References
External links from the advisory. They lead to third-party sites.