Unrated severityNVD Advisory· Published Dec 20, 2005· Updated Apr 16, 2026

CVE-2005-4377

Description

Cross-site scripting (XSS) vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) PageID and (2) SiteNodeID parameters.

Affected products

Nma/Baseline CMS
cpe:2.3:a:nma:baseline_cms:*:*:*:*:*:*:*:*
Range: <=1.95

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

pridels0.blogspot.com/2005/12/baseline-cms-vuln.htmlnvd
www.osvdb.org/21938nvd
www.vupen.com/english/advisories/2005/2974nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000