CVE-2024-26128: baserCMS Cross-site Scripting vulnerability in Content Management
baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the content management feature. Version 5.0.9 contains a fix for this vulnerability.
Other sources
There is a XSS Vulnerability in Content Management Feature to baserCMS.
Target baserCMS 5.0.8 and earlier versions
Vulnerability Malicious code may be executed in Content Management Feature.
Countermeasures Update to the latest version of baserCMS
Please refer to the following page to reference for more information. https://basercms.net/security/JVN73283159
— GitHub
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/baserproject/basercmsto a version that resolves this vulnerability.Fixed in 5.0.9 - Upgrade
Upgrade
baserCMSto a version that resolves this vulnerability.Fixed in 5.0.9
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26128?
CVE-2024-26128 is considered a medium severity cross-site scripting vulnerability in baserCMS.
How do I fix CVE-2024-26128?
To fix CVE-2024-26128, you should upgrade to baserCMS version 5.0.9 or later.
What type of vulnerability is CVE-2024-26128?
CVE-2024-26128 is a cross-site scripting (XSS) vulnerability affecting the content management feature of baserCMS.
Which versions of baserCMS are affected by CVE-2024-26128?
CVE-2024-26128 affects all baserCMS versions prior to 5.0.9.
Is there a public advisory for CVE-2024-26128?
Yes, a public advisory for CVE-2024-26128 can be found on the baserCMS GitHub security advisories page.