Threat Investigation
Request a demo

CVE-2022-39325

Medium

Description

BaserCMS is a content management system with a japanese language focus. In affected versions there is a cross-site scripting vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. Users of baserCMS are advised to upgrade as soon as possible. There are no known workarounds for this vulnerability.

SeverityMedium
CVSS4.6
Exploit probability—
ProductBasercms
PublishedNov 25, 2022
First seenNov 25, 2022
Weakness typeCWE-79Cross-site scripting (XSS)

How to fix

Update
  • basercms basercms4.7.2 or later
  • baserproject/basercms4.7.2 or later

Affected products

ProductAffected versionsFixed in
basercms basercmsv < 4.7.24.7.2
baserproject/basercmsPackagistv < 4.7.24.7.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.