Unrated severityNVD Advisory· Published Dec 20, 2005· Updated Jun 16, 2026

CVE-2005-4377

Description

Cross-site scripting (XSS) vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) PageID and (2) SiteNodeID parameters.

Affected products

Nma/Baseline CMS
cpe:2.3:a:nma:baseline_cms:*:*:*:*:*:*:*:*
Range: <=1.95
Baseline/Baseline CMSllm-create
Range: <=1.95

Patches

Vulnerability mechanics

References

pridels0.blogspot.com/2005/12/baseline-cms-vuln.htmlnvd
www.osvdb.org/21938nvd
www.vupen.com/english/advisories/2005/2974nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000