{"id":"CVE-2018-0570","details":"Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.","aliases":["GHSA-994g-74gq-5qpr"],"modified":"2026-07-28T08:13:14.936445Z","published":"2018-06-26T14:29:00.850Z","references":[{"type":"ADVISORY","url":"http://jvn.jp/en/jp/JVN67881316/index.html"},{"type":"ADVISORY","url":"https://basercms.net/security/JVN67881316"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/baserproject/basercms","events":[{"introduced":"a39ac2f47492188b676a1104b653d523c891135a"},{"last_affected":"8dafa2d69e449536e0320266a75a4516df5b00ad"},{"introduced":"0"},{"last_affected":"0394401af4b827ab6e3e779a4abac8e90eb4b54a"}],"database_specific":{"cpe":"cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"3.0.0"},{"last_affected":"3.0.15"},{"introduced":"0"},{"last_affected":"4.1.0.1"}],"source":"CPE_RANGE"}}],"versions":["3.0.15","4.1.0.1","4.1.0","4.0.7","4.0.6","3.0.14","3.0.13","3.0.11.1","3.0.12","4.0.0","3.0.11","3.0.10","3.0.9","3.0.7","3.0.0","basercms-3.0.1","3.0.1","3.0.2","3.0.4","3.0.5.1","3.0.3","4.0.0-beta","3.0.6","3.0.6-beta","3.0.5","basercms-3.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-0570.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"}]}