Security Advisory

CVE-2020-15276

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-10-30 18:55:15
Last updated 2024-08-04 13:15:19
Assigner GitHub_M
State PUBLISHED

Description

baserCMS before version 4.4.1 is vulnerable to Cross-Site Scripting. Arbitrary JavaScript may be executed by entering a crafted nickname in blog comments. The issue affects the blog comment component. It is fixed in version 4.4.1.