Moderate severityNVD Advisory· Published Mar 26, 2021· Updated Aug 3, 2024

CVE-2021-20681

Description

Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
baserproject/basercmsPackagist	< 4.4.5	4.4.5

Affected products

Basercms/Basercmsv5
Range: versions prior to 4.4.5

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/advisories/GHSA-24p5-x9f9-vvpxghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-20681ghsaADVISORY
basercms.net/security/JVN64869876ghsax_refsource_MISCWEB
jvn.jp/en/jp/JVN64869876/index.htmlghsax_refsource_MISCWEB

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000