CVE-2024-26128

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Feb 22, 2024

Updated: Dec 20, 2024

CWE ID 79

Summary

CVE-2024-26128 is a cross-site scripting vulnerability affecting the baserCMS website development framework. Before version 5.0.9, the content management feature contained this issue, which could allow attackers to inject malicious scripts into web pages viewed by other users. Version 5.0.9 has been released to address this vulnerability, and users are strongly encouraged to upgrade to this version to secure their websites against potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

baserCMS

Affected Vendors

Basercms

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/uhKmRV
https://www.cve.org/CVERecord?id=CVE-2024-26128
https://nvd.nist.gov/vuln/detail/CVE-2024-26128

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Measuring the US-China AI Gap

TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered

Uncovering MintsLoader With Recorded Future Malware Intelligence Hunting

Know What Matters

For Customers

For Partners