mirror of
https://github.com/netbirdio/advisory-database.git
synced 2026-05-22 18:04:22 -07:00
Publish GHSA-24p5-x9f9-vvpx
This commit is contained in:
@@ -1,12 +1,12 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-24p5-x9f9-vvpx",
|
||||
"modified": "2021-03-29T22:39:01Z",
|
||||
"modified": "2023-07-05T23:17:56Z",
|
||||
"published": "2021-06-08T20:10:27Z",
|
||||
"aliases": [
|
||||
"CVE-2021-20681"
|
||||
],
|
||||
"summary": "Cross-site Scripting in baserCMS",
|
||||
"summary": "Cross-site Scripting (XSS) in baserCMS",
|
||||
"details": "Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.",
|
||||
"severity": [
|
||||
{
|
||||
@@ -44,17 +44,9 @@
|
||||
"type": "WEB",
|
||||
"url": "https://basercms.net/security/JVN64869876"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/baserproject/basercms"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://jvn.jp/en/jp/JVN64869876/index.html"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://packagist.org/packages/baserproject/basercms"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
|
||||
Reference in New Issue
Block a user