CVE-2022-39325

BaserCMS is a content management system with a japanese language focus. In affected versions there is a cross-site scripting vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. Users of baserCMS are advised to upgrade as soon as possible. There are no known workarounds for this vulnerability.

• CWE-79

• https://basercms.net/security/JVN_53682526Vendor Advisory
• https://github.com/baserproject/basercms/commit/b6f8a54e90dee51317eddf517b776fe8b4cd3ef6Patch, Third Party Advisory
• https://github.com/baserproject/basercms/security/advisories/GHSA-395x-wv32-44v5Third Party Advisory
• https://basercms.net/security/JVN_53682526Vendor Advisory
• https://github.com/baserproject/basercms/commit/b6f8a54e90dee51317eddf517b776fe8b4cd3ef6Patch, Third Party Advisory
• https://github.com/baserproject/basercms/security/advisories/GHSA-395x-wv32-44v5Third Party Advisory

Published

Nov 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-39319FreeRDP is a free remote desktop protocol library and client…4.6
• CVE-2022-39320FreeRDP is a free remote desktop protocol library and client…4.6
• CVE-2022-39321GitHub Actions Runner is the application that runs a job fro…9.9
• CVE-2022-39322@keystone-6/core is a core package for Keystone 6, a content…9.8
• CVE-2022-39323GLPI stands for Gestionnaire Libre de Parc Informatique. GLP…9.8
• CVE-2022-39324Grafana is an open-source platform for monitoring and observ…3.5
• CVE-2022-39326kartverket/github-workflows are shared reusable workflows fo…8.8
• CVE-2022-39327Azure CLI is the command-line interface for Microsoft Azure.…9.8
• CVE-2022-39328Grafana is an open-source platform for monitoring and observ…8.1
• CVE-2022-39329Nextcloud Server is the file server software for Nextcloud, …5.3
• CVE-2022-3933The Essential Real Estate WordPress plugin before 3.9.6 does…5.4
• CVE-2022-39330Nextcloud Server is the file server software for Nextcloud, …4.3