CVE-2024-46994: baserCMS has Cross-site Scripting Vulnerability in Blog posts and Contents list Feature
baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog posts and Contents list Feature. Version 5.1.2 fixes this issue.
Other sources
XSS vulnerability in Blog posts and Contents list Feature to baserCMS.
Target baserCMS 5.1.1 and earlier versions
Vulnerability Malicious code may be executed in Blog posts and Contents list feature.
Countermeasures Update to the latest version of baserCMS
Please refer to the following page to reference for more information. https://basercms.net/security/JVN00876083
Credits Kyohei Ota@LEON TECHNOLOGY,Inc.
— GitHub
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46994?
CVE-2024-46994 is a cross-site scripting (XSS) vulnerability that can lead to potential security risks in baserCMS.
How do I fix CVE-2024-46994?
To fix CVE-2024-46994, upgrade to baserCMS version 5.1.2 or later.
What versions of baserCMS are affected by CVE-2024-46994?
Versions of baserCMS prior to 5.1.2, specifically up to version 5.1.1, are affected by CVE-2024-46994.
What features are affected by CVE-2024-46994?
The cross-site scripting vulnerability in CVE-2024-46994 affects the Blog posts and Contents list features of baserCMS.
Is CVE-2024-46994 a critical vulnerability?
CVE-2024-46994 is considered a moderate risk due to its potential for XSS attacks.