CVE-2018-0574: XSS
Published Jun 26, 2018
·Updated
Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
4 affected components
composer/baserproject/basercms<=3.0.15
composer/baserproject/basercms>=4.0.0<=4.1.0.1
baserCMS BaserCMS>=3.0.0<=3.0.15
baserCMS BaserCMS>4.0.0<=4.1.0.1
Event History
Jun 26, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
May 14, 2022
Advisory Published
03:06 AM
Frequently Asked Questions
1
What is CVE-2018-0574?
CVE-2018-0574 is a cross-site scripting vulnerability in baserCMS.
2
How does CVE-2018-0574 impact baserCMS?
CVE-2018-0574 allows remote attackers to inject arbitrary web script or HTML into baserCMS.
3
Which versions of baserCMS are affected by CVE-2018-0574?
baserCMS 4.1.0.1 and earlier versions, as well as baserCMS 3.0.15 and earlier versions, are affected by CVE-2018-0574.
4
What is the severity of CVE-2018-0574?
CVE-2018-0574 has a severity rating of 6.1 (medium).
5
How can I fix CVE-2018-0574?
To fix CVE-2018-0574, it is recommended to update baserCMS to version 4.1.0.2 or later.