CVE-2024-46995: baserCMS has Cross-site Scripting Vulnerability in HTTP 400 Bad Request
baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in HTTP 400 Bad Request. Version 5.1.2 fixes this issue.
Other sources
XSS vulnerability in HTTP 400 Bad Request to baserCMS.
Target baserCMS 5.1.1 and earlier versions
Vulnerability Malicious code may be executed in HTTP 400 Bad Request.
Countermeasures Update to the latest version of baserCMS
Please refer to the following page to reference for more information. https://basercms.net/security/JVN00876083
— GitHub
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46995?
CVE-2024-46995 is a medium severity vulnerability due to its cross-site scripting nature.
How do I fix CVE-2024-46995?
To fix CVE-2024-46995, upgrade to baserCMS version 5.1.2 or later.
Which versions of baserCMS are affected by CVE-2024-46995?
Versions of baserCMS prior to 5.1.2 are affected by CVE-2024-46995.
What type of vulnerability is CVE-2024-46995?
CVE-2024-46995 is a cross-site scripting (XSS) vulnerability.
What impact does CVE-2024-46995 have on baserCMS users?
CVE-2024-46995 allows attackers to execute arbitrary scripts in the context of the victim's browser.