CVE-2020-15159: Cross-site Scripting

August 28, 2020 (updated September 3, 2020)

baserCMS is affected by Cross Site Scripting (XSS) and Remote Code Execution (RCE). This may be executed by logging in as a system administrator and uploading an executable script file such as a PHP file. The affected components are ThemeFilesController.php and UploaderFilesController.php.

References

basercms.net/security/20200827
nvd.nist.gov/vuln/detail/CVE-2020-15159

Code Behaviors & Features

Detect and mitigate CVE-2020-15159 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →