medium4.8
CVE-2022-41994
baserCMS vulnerable to stored Cross-site Scripting
Impact
Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | baserproject/basercms | < 4.7.2 | 4.7.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Basercms | Basercms | before 4.7.2 |