CVE-2018-0570 XSS in baserCMS
MediumCVSS 5.4
EPSS 0.67%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| baserproject/basercms(Packagist) | >= 4.0.0, <= 4.1.0.1 | No fix listed |
| baserproject/basercms(Packagist) | = 4.0.0 | No fix listed |
| baserproject/basercms(Packagist) | = 4.0.1 | No fix listed |
| baserproject/basercms(Packagist) | = 4.0.10 | No fix listed |
| baserproject/basercms(Packagist) | = 4.0.10.1 | No fix listed |
| baserproject/basercms(Packagist) | = 4.0.11 | No fix listed |
| baserproject/basercms(Packagist) | = 4.0.2 | No fix listed |
| baserproject/basercms(Packagist) | = 4.0.2.1 | No fix listed |
| baserproject/basercms(Packagist) | = 4.0.3 | No fix listed |
| baserproject/basercms(Packagist) | = 4.0.4 | No fix listed |
| baserproject/basercms(Packagist) | = 4.0.5 | No fix listed |
| baserproject/basercms(Packagist) | = 4.0.5.1 | No fix listed |
| baserproject/basercms(Packagist) | = 4.0.5.2 | No fix listed |
| baserproject/basercms(Packagist) | = 4.0.6 | No fix listed |
| baserproject/basercms(Packagist) | = 4.0.7 | No fix listed |
| baserproject/basercms(Packagist) | = 4.0.8 | No fix listed |
| baserproject/basercms(Packagist) | = 4.0.9 | No fix listed |
| baserproject/basercms(Packagist) | = 4.1.0 | No fix listed |
| baserproject/basercms(Packagist) | = 4.1.0.1 | No fix listed |
| baserproject/basercms(Packagist) | <= 3.0.15 | No fix listed |
| baserproject/basercms(Packagist) | = 0.0.1 | No fix listed |
| baserproject/basercms(Packagist) | = 0.0.2 | No fix listed |
| baserproject/basercms(Packagist) | = 0.0.3 | No fix listed |
| baserproject/basercms(Packagist) | = 0.0.4 | No fix listed |
| baserproject/basercms(Packagist) | = 0.0.5 | No fix listed |
Show 27 more
| Product | Affected versions | Fixed in |
|---|---|---|
| baserproject/basercms(Packagist) | = 0.0.6 | No fix listed |
| baserproject/basercms(Packagist) | = 0.0.7 | No fix listed |
| baserproject/basercms(Packagist) | = 0.0.8 | No fix listed |
| baserproject/basercms(Packagist) | = 1.0.0 | No fix listed |
| baserproject/basercms(Packagist) | = 2.0.0-rc1 | No fix listed |
| baserproject/basercms(Packagist) | = 2.0.0-rc2 | No fix listed |
| baserproject/basercms(Packagist) | = 2.0.0-rc3 | No fix listed |
| baserproject/basercms(Packagist) | = 2.0.0-rc4 | No fix listed |
| baserproject/basercms(Packagist) | = 2.0.0-rc5 | No fix listed |
| baserproject/basercms(Packagist) | = 2.0.0-rc6 | No fix listed |
| baserproject/basercms(Packagist) | = 3.0.10 | No fix listed |
| baserproject/basercms(Packagist) | = 3.0.10.1 | No fix listed |
| baserproject/basercms(Packagist) | = 3.0.11 | No fix listed |
| baserproject/basercms(Packagist) | = 3.0.11.1 | No fix listed |
| baserproject/basercms(Packagist) | = 3.0.12 | No fix listed |
| baserproject/basercms(Packagist) | = 3.0.13 | No fix listed |
| baserproject/basercms(Packagist) | = 3.0.14 | No fix listed |
| baserproject/basercms(Packagist) | = 3.0.15 | No fix listed |
| baserproject/basercms(Packagist) | = 3.0.7 | No fix listed |
| baserproject/basercms(Packagist) | = 3.0.7.1 | No fix listed |
| baserproject/basercms(Packagist) | = 3.0.8 | No fix listed |
| baserproject/basercms(Packagist) | = 3.0.8.1 | No fix listed |
| baserproject/basercms(Packagist) | = 3.0.9 | No fix listed |
| baserproject/basercms(Packagist) | = 3.0.9.1 | No fix listed |
| basercms | >= 3.0.0, <= 3.0.15 | No fix listed |
| basercms | >= 4.0.0, <= 4.1.0.1 | No fix listed |
| baserCMS Users Community BaserCMS | = (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- basercms.net vendor-advisory
- github.com product
- JVN#67881316 third-party-advisory
- github.com