CVE-2020-15155

Cross-Site Scripting in baserCMS

7.3 HighFix available

CVE-2020-15155 is a high vulnerability (CVSS 7.3) in Basercms, published August 28, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.29%, the 70th percentile. Fixed in baserproject/basercms 4.3.7.

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components is toolbar.php. The issue is fixed in version 4.3.7.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: High
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: None

Exploit likelihood

1.29%Down 0.2 points since Apr 14, 2021

What each source reports

CVE List Score used 7.3

Cross-Site Scripting in baserCMS

Record: CVE-2020-15155
CVSS 3.1: 7.3 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
Weakness: CWE-79
Updated: 2026-11-02

EUVDEUVD-2020-0591 7.3

Record: EUVD-2020-0591
CVSS 3.1: 7.3 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
Updated: 2026-11-03

GitHub AdvisoriesGHSA-4r3m-j6x5-48m3 7.3

Cross Site Scripting(XSS) Vulnerability in Latest Release 4.3.6 Site basic settings

Record: GHSA-4r3m-j6x5-48m3
CVSS 3.1: 7.3 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
Weakness: CWE-79
Updated: 2026-11-02

NVD 7.3

Record: CVE-2020-15155
CVSS 3.1: 7.3 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
CVSS 2.0: 2.1 LowAV:N/AC:H/Au:S/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

OSV 7.3

Record: CVE-2020-15155
CVSS 3.1: 7.3 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
Updated: 2026-11-02

OSVGHSA-4r3m-j6x5-48m3 7.3