XSS in baserCMS before 4.1.4

MEDIUM 4.8CVE-2018-18943 · GHSA-fx2m-5m9v-jhgp · Published 05/11/2018 · updated 17/06/2026

In short

CVE-2018-18943 is a MEDIUM (CVSS 4.8) vulnerability affecting baserproject/basercms, basercms (basercms).
Chance of exploitation in the next 30 days (EPSS): 0.73%, higher than 54.3% of all vulnerabilities.
Fix: update to 4.1.4 or later.

Package	Affected versions	Patched versions
baserproject/basercms Packagist	`< 4.1.4`	`4.1.4`
basercms basercms	`< 4.1.4`	`4.1.4`

Description

An issue was discovered in baserCMS before 4.1.4. In the Register New Category feature of the Upload menu, the category name can be used for XSS via the data[UploaderCategory][name] parameter to an admin/uploader/uploader_categories/edit URI.

NVD description

An issue was discovered in baserCMS before 4.1.4. In the Register New Category feature of the Upload menu, the category name can be used for XSS via the data[UploaderCategory][name] parameter to an admin/uploader/uploader_categories/edit URI.

References

nvd.nist.gov/vuln/detail/CVE-2018-18943 · ADVISORY
web.archive.org/web/20200130073341/https://basercms.net/release/4_1_4 · WEB
web.archive.org/web/20211209034642/http://sunu11.com/2018/10/31/baserCMS · WEB
sunu11.com/2018/10/31/baserCMS · Exploit
basercms.net/release/4_1_4 · Release Notes

More vulnerabilities in baserproject/basercms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

baserproject/basercms

Packagist

< 4.1.4

4.1.4

basercms

< 4.1.4

4.1.4

Description

NVD description

More vulnerabilities in baserproject/basercms

See all →