CVE-2020-15276 — Cross Site Scripting in baserCMS
baserCMS before version 4.4.1 is vulnerable to Cross-Site Scripting. Arbitrary JavaScript may be executed by entering a crafted nickname in blog comments. The issue affects the …
Published: 2020-10-30 · CVSS: 7.7 · CVSS 3.1
baserCMS before version 4.4.1 is vulnerable to Cross-Site Scripting. Arbitrary JavaScript may be executed by entering a crafted nickname in blog comments. The issue affects the blog comment component. It is fixed in version 4.4.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7