CVE-2022-42486

Name of the Vulnerable Software and Affected Versions baserCMS versions prior to 4.7.2

Description The issue allows a remote authenticated attacker with administrative privileges to inject an arbitrary script in the User group management of baserCMS. This is a stored cross-site scripting issue.

Recommendations For versions prior to 4.7.2, update to version 4.7.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the User group management feature to minimize the risk of exploitation.