Vulnerabilities

TI-2020-11931 CVE-2020-15159 · GHSA-673x-f5wx-fxpw

Cross Site Scripting leading to RCE in baserCMS

LOW 37

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) and Remote Code Execution (RCE).

CVSS 3.1HIGH 7.6 Network High privileges User interaction EPSS 0.02152 Published 2020-08-28 Fixed in < 4.3.7, 4.3.7 CWE-79

TI-2020-11927 CVE-2020-15155 · GHSA-4r3m-j6x5-48m3

LOW 35

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution.

CVSS 3.1HIGH 7.3 Network High privileges User interaction EPSS 0.01285 Published 2020-08-28 Fixed in < 4.3.7, 4.3.7 CWE-79

TI-2020-11926 CVE-2020-15154 · GHSA-cpxc-67rc-c775

LOW 34

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution.

CVSS 3.1HIGH 7.3 Network High privileges User interaction EPSS 0.01011 Published 2020-08-28 Fixed in < 4.3.7, 4.3.7 CWE-79