GHSA-jmq3-x8q7-j9qm
baserCMS has a cross-site scripting vulnerability in blog posts
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | baserproject/basercms | < 5.2.3 | 5.2.3 |
Details
As written in the advisory (Markdown source, shown as plain text).
baserCMS has a cross-site scripting vulnerability in blog posts.
### Target
baserCMS 5.2.1 and earlier versions
### Vulnerability
Malicious Javascript may be executed in blog posts.
### Countermeasures
Update to the latest version of baserCMS
Please refer to the following page to reference for more information.
https://basercms.net/security/JVN_20837860
### Credits
Gai Tanaka@Mitsui Bussan Secure Directions, Inc.
References
External links from the advisory. They lead to third-party sites.