Most recent entries from all

cnvd-2021-23791

EUVD-2026-21742

fkie_cve-2021-20683

Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.

GHSA-v9w8-hq92-v39m — Cross-site Scripting (XSS) in baserCMS

Affected: Packagist: baserproject/basercms

gsd-2021-20683

jvndb-2021-000027

baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. *Improper Neutralization of JavaScript input in the page editing function (CWE-79) - CVE-2021-20681 *OS command injection (CWE-78) - CVE-2021-20682 *Improper Neutralization of JavaScript input in the blog article editing function (CWE-79) - CVE-2021-20683 CVE-2021-20681, CVE-2021-20682 Sho Odagiri of Information Science College reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20683 Yamaguchi Kakeru reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.