Vulnerability Database

296,202

Total vulnerabilities in the database

CVE-2020-15155

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components is toolbar.php. The issue is fixed in version 4.3.7.

CVSS v3:

  • Severity: High
  • Score: 7.3
  • AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N

CVSS v2:

  • Severity: Low
  • Score: 2.1
  • AV:N/AC:H/Au:S/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
basercms / basercms - 4.3.6.x
Composer icon baserproject / basercms 4.0.0 4.3.7