CVE-2020-15154

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components are: content_fields.php, content_info.php, content_options.php, content_related.php, index_list_tree.php, jquery.bcTree.js. The issue is fixed in version 4.3.7.

• CWE-79
• CWE-79

• https://basercms.net/security/20200827Patch, Vendor Advisory
• https://github.com/baserproject/basercms/security/advisories/GHSA-cpxc-67rc-c775Patch, Third Party Advisory
• https://basercms.net/security/20200827Patch, Vendor Advisory
• https://github.com/baserproject/basercms/security/advisories/GHSA-cpxc-67rc-c775Patch, Third Party Advisory

Published

Aug 28, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15149NodeBB before version 1.14.3 has a bug introduced in version…9.9
• CVE-2020-1515An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-15150There is a vulnerability in Paginator (Elixir/Hex package) w…9.8
• CVE-2020-15151OpenMage LTS before versions 19.4.6 and 20.0.2 allows attack…8
• CVE-2020-15152ftp-srv is an npm package which is a modern and extensible F…9.1
• CVE-2020-15153Ampache before version 4.2.2 allows unauthenticated users to…9.8
• CVE-2020-15155baserCMS 4.3.6 and earlier is affected by Cross Site Scripti…7.3
• CVE-2020-15156In nodebb-plugin-blog-comments before version 0.7.0, a logge…8.1
• CVE-2020-15157In containerd (an industry-standard container runtime) befor…6.1
• CVE-2020-15158In libIEC61850 before version 1.4.3, when a message with COT…9.8
• CVE-2020-15159baserCMS 4.3.6 and earlier is affected by Cross Site Scripti…7.6
• CVE-2020-1516An elevation of privilege vulnerability exists when the Wind…7.8