CVE-2016-4883

Cross-site scripting vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Score

CVSS 3.0 5.4 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2017-05-12

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Basercms (Basercms)
• Basercms (Basercms Users Community)

References

• http://basercms.net/security/JVN92765814
• http://www.securityfocus.com/bid/93217
• https://jvn.jp/en/jp/JVN92765814/index.html