CVE-2018-18943: Cross-site Scripting

November 5, 2018 (updated December 10, 2018)

An issue was discovered in baserCMS In the Register New Category feature of the Upload menu, the category name can be used for XSS via the data[UploaderCategory][name] parameter to an admin/uploader/uploader_categories/edit URI.

References

basercms.net/release/4_1_4
nvd.nist.gov/vuln/detail/CVE-2018-18943

Code Behaviors & Features

Detect and mitigate CVE-2018-18943 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →