CVE-2018-0570: XSS
Published Jun 26, 2018
·Updated
Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
4 affected components
composer/baserproject/basercms<=3.0.15
composer/baserproject/basercms>=4.0.0<=4.1.0.1
baserCMS BaserCMS>=3.0.0<=3.0.15
baserCMS BaserCMS>4.0.0<=4.1.0.1
Event History
Jun 26, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
May 14, 2022
Advisory Published
03:06 AM
Frequently Asked Questions
1
What is CVE-2018-0570?
CVE-2018-0570 is a cross-site scripting vulnerability in baserCMS.
2
How can remote authenticated attackers exploit CVE-2018-0570?
Remote authenticated attackers can exploit CVE-2018-0570 by injecting arbitrary web script or HTML through unspecified vectors.
3
Which versions of baserCMS are affected by CVE-2018-0570?
baserCMS versions 4.1.0.1 and earlier, as well as baserCMS versions 3.0.15 and earlier, are affected by CVE-2018-0570.
4
What is the severity of CVE-2018-0570?
CVE-2018-0570 has a severity rating of 5.4 (medium).
5
How can I fix CVE-2018-0570?
To fix CVE-2018-0570, update baserCMS to version 4.1.0.2 or later, or baserCMS 3.0.16 or later.