CVE-2018-18943

4.8 mediumEPSS 0.7%

Medium (4.8) in basercms basercms. EPSS 0.7% chance of exploitation in the next 30 days.

An issue was discovered in baserCMS before 4.1.4. In the Register New Category feature of the Upload menu, the category name can be used for XSS via the data[UploaderCategory][name] parameter to an admin/uploader/uploader_categories/edit URI.

Severity

CVSS 3.0

4.8 medium

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2018-11-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

basercms:basercms

References

http://sunu11.com/2018/10/31/baserCMS/
https://basercms.net/release/4_1_4
http://sunu11.com/2018/10/31/baserCMS/
https://basercms.net/release/4_1_4

Check your stack JSON