CVE-2021-20683

Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
jpcertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 43%
VendorProductVersion
basercmsbasercms
𝑥
< 4.4.5
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://basercms.net/security/JVN64869876
https://jvn.jp/en/jp/JVN64869876/index.html
https://basercms.net/security/JVN64869876
https://jvn.jp/en/jp/JVN64869876/index.html