CVE-2021-39136: Cross-site scripting vulnerability in file upload

Q: What is the vulnerability in baserCMS?

The vulnerability is a cross-site scripting (XSS) vulnerability in the file upload function of the baserCMS management system.

Q: What versions of baserCMS are affected by this vulnerability?

Versions up to and including 4.5.1 of baserCMS are affected.

Q: How severe is the vulnerability?

The vulnerability has a severity score of 5.4, which is considered high.

Q: How can I fix the vulnerability in baserCMS?

Users are advised to update to a version of baserCMS that is not affected by the vulnerability.

Published Aug 25, 2021

Updated

baserCMS is an open source content management system with a focus on Japanese language support. In affected versions there is a cross-site scripting vulnerability in the file upload function of the management system of baserCMS. Users are advised to update as soon as possible. No workaround are available to mitigate this issue.

Affected Software

1 affected component

baserCMS BaserCMS<4.5.1

Event History

Aug 25, 2021

CVE Published

via MITRE·06:05 PM

Data Sourced

via MITRE·06:05 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is baserCMS?

baserCMS is an open source content management system with a focus on Japanese language support.

What is the vulnerability in baserCMS?

The vulnerability is a cross-site scripting (XSS) vulnerability in the file upload function of the baserCMS management system.

What versions of baserCMS are affected by this vulnerability?