GHSA-677c-xv24-crgx
baserCMS is Vulnerable to Cross-site Scripting
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | baserproject/basercms | < 5.2.3 | 5.2.3 |
Details
As written in the advisory (Markdown source, shown as plain text).
baserCMS has DOM-based cross-site scripting in tag creation.
### Target
baserCMS 5.2.2 and earlier versions
### Vulnerability
Malicious JavaScript may be executed when creating a tag.
### Countermeasures
Update to the latest version of baserCMS
Please refer to the following page to reference for more information.
https://basercms.net/security/JVN_94952030
### Credits
- quanlna2 (Le Nguyen Anh Quan)
- namdi (Do Ich Nam)
- minhnn42 (Nguyen Ngoc Minh)
- VCSLab - Viettel Cyber Security
References
External links from the advisory. They lead to third-party sites.