Cross Site Scripting(XSS) Vulnerability in Latest Release 4.3.6 Site basic settings

HIGH 7.3CVE-2020-15155 · GHSA-4r3m-j6x5-48m3 · Published 28/08/2020 · updated 17/06/2026

In short

CVE-2020-15155 is a HIGH (CVSS 7.3) vulnerability affecting baserproject/basercms, basercms (basercms).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.1% of all vulnerabilities.
Fix: update to 4.3.7 or later.

Package	Affected versions	Patched versions
baserproject/basercms Packagist	`≥ 4.0.0, < 4.3.7`	`4.3.7`
basercms basercms	`≤ 4.3.6`	No fix yet

Description

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components is toolbar.php. The issue is fixed in version 4.3.7.

NVD description

References

baserproject/basercms security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2020-15155 · ADVISORY
baserproject/basercms commit 94cbfab · WEB
basercms.net/security/20200827 · WEB

More vulnerabilities in baserproject/basercms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

baserproject/basercms

Packagist

≥ 4.0.0, < 4.3.7

4.3.7

basercms

≤ 4.3.6

No fix yet

Description

NVD description

More vulnerabilities in baserproject/basercms

See all →