CVE-2011-2673: XSS
Published Oct 2, 2011
·Updated
Cross-site scripting (XSS) vulnerability in BaserCMS before 1.6.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
27 affected components
baserCMS BaserCMS=1.5.6
baserCMS BaserCMS=1.5.7
baserCMS BaserCMS=1.5.4
baserCMS BaserCMS=1.5.5
baserCMS BaserCMS=1.5.8
baserCMS BaserCMS=1.5.9
baserCMS BaserCMS=1.6.0
baserCMS BaserCMS=1.6.1
baserCMS BaserCMS=1.6.2
baserCMS BaserCMS=1.6.4
baserCMS BaserCMS=1.6.5
baserCMS BaserCMS=1.6.3
baserCMS BaserCMS=1.6.6
baserCMS BaserCMS=1.6.9
baserCMS BaserCMS=1.6.7.1
baserCMS BaserCMS=1.6.8
baserCMS BaserCMS=1.6.7
baserCMS BaserCMS=1.6.10
baserCMS BaserCMS=1.6.11
baserCMS BaserCMS=1.6.9.1
baserCMS BaserCMS=1.6.11.1
baserCMS BaserCMS=1.6.11.3
baserCMS BaserCMS=1.6.11.4
baserCMS BaserCMS=1.6.11.2
baserCMS BaserCMS=1.6.12
baserCMS BaserCMS<=1.6.13.1
baserCMS BaserCMS=1.6.13
Event History
Oct 2, 2011
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2673?
The severity of CVE-2011-2673 is classified as medium due to its potential for Cross-site scripting attacks.
2
How do I fix CVE-2011-2673?
To fix CVE-2011-2673, upgrade BaserCMS to version 1.6.13.2 or later where the vulnerability is patched.
3
Which versions of BaserCMS are affected by CVE-2011-2673?
CVE-2011-2673 affects BaserCMS versions prior to 1.6.13.2 including all versions from 1.5.4 to 1.6.13.1.
4
What type of attack does CVE-2011-2673 allow?
CVE-2011-2673 allows remote attackers to perform Cross-site scripting (XSS) attacks by injecting arbitrary web scripts.
5
Is there a temporary workaround for CVE-2011-2673 if I cannot immediately upgrade BaserCMS?
A temporary workaround for CVE-2011-2673 is not recommended; upgrading to a patched version is the best solution.