| Package | Affected versions | Patched versions |
|---|---|---|
| baserproject/basercms | < 4.4.5 | 4.4.5 |
| basercms | < 4.4.5 | 4.4.5 |
Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free