CVE-2022-39325: BaserCMS is a content management system with a japanese language focus. In affected versions there is a cross-site scripting vulnerability on the management…

PriorityP424medium6.1CVSS 3.1

AVNACLPRNUIRSCCLILAN

EPSS

0.55%

41.7th percentile

BaserCMS is a content management system with a japanese language focus. In affected versions there is a cross-site scripting vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. Users of baserCMS are advised to upgrade as soon as possible. There are no known workarounds for this vulnerability.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
basercms	basercms	< 4.7.2	4.7.2
baserproject	basercms	< 4.7.2	4.7.2
baserproject	basercms	>= 0 < 4.7.2	4.7.2

CVSS provenance

nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

ghsa6.1MEDIUM

osv6.1MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.