Lucene search

K
osvGoogleOSV:GHSA-4R3M-J6X5-48M3
HistoryAug 28, 2020 - 9:20 p.m.

Cross Site Scripting(XSS) Vulnerability in Latest Release 4.3.6 Site basic settings

2020-08-2821:20:42
Google
osv.dev
8

0.001 Low

EPSS

Percentile

46.4%

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components is toolbar.php. The issue is fixed in version 4.3.7.

0.001 Low

EPSS

Percentile

46.4%

Related for OSV:GHSA-4R3M-J6X5-48M3