CVE-2022-41994: Basercms

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.

Affected products

• Basercms Basercms: before 4.7.2 (fixed in 4.7.2)

Published 2022-12-07. Last modified 2026-06-17.