Most recent entries from all

cnvd-2021-93919

EUVD-2026-30436

fkie_cve-2021-39136

baserCMS is an open source content management system with a focus on Japanese language support. In affected versions there is a cross-site scripting vulnerability in the file upload function of the management system of baserCMS. Users are advised to update as soon as possible. No workaround are available to mitigate this issue.

GHSA-hgjr-632x-qpp3 — Cross-site scripting vulnerability in file upload

Affected: Packagist: baserproject/basercms

There is a cross-site scripting vulnerability in file upload on the management system of baserCMS.

This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible.

### Target baserCMS 4.5.1 and earlier versions

### Vulnerability Execution of malicious JavaScript code may alter the display of the page or leak cookie information.

### Countermeasures Update to the latest version of baserCMS

Please refer to the next page for details. https://basercms.net/security/JVN_14134801

gsd-2021-39136

jvndb-2021-000080

baserCMS provided by baserCMS Users Community contains a cross-site scripting vulnerability (CWE-79). Akagi Yusuke of NTT-ME CORPORATION reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.