CVE-2020-15155

EUVD-2020-0591
baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components is toolbar.php. The issue is fixed in version 4.3.7.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.3 HIGH
NETWORK
HIGH
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
GitHub_MCNA
7.3 HIGH
NETWORK
HIGH
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
Affected Products (NVD)
VendorProductVersion
basercmsbasercms
𝑥
≤ 4.3.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://basercms.net/security/20200827
https://github.com/baserproject/basercms/commit/94cbfab74c9fd6d04492597a1a684674c3c0e30f
https://github.com/baserproject/basercms/security/advisories/GHSA-4r3m-j6x5-48m3
https://basercms.net/security/20200827
https://github.com/baserproject/basercms/commit/94cbfab74c9fd6d04492597a1a684674c3c0e30f
https://github.com/baserproject/basercms/security/advisories/GHSA-4r3m-j6x5-48m3