Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-zvaq-2qbe-myhg
Vulnerability ID VCID-zvaq-2qbe-myhg
Aliases CVE-2020-15273
GHSA-wpww-4jf4-4hx8
Summary
Status Published
Exploitability 0.5
Weighted Severity 6.6
Risk 3.3
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00414 https://api.first.org/data/v1/epss?cve=CVE-2020-15273
epss 0.00414 https://api.first.org/data/v1/epss?cve=CVE-2020-15273
cvssv3.1_qr LOW https://github.com/advisories/GHSA-wpww-4jf4-4hx8
cvssv3.1 7.3 https://github.com/baserproject/basercms/commit/b70474ef9dcee6ad8826360884625dc7ca9041a1
generic_textual LOW https://github.com/baserproject/basercms/commit/b70474ef9dcee6ad8826360884625dc7ca9041a1
cvssv3.1 7.3 https://github.com/baserproject/basercms/security/advisories/GHSA-wpww-4jf4-4hx8
cvssv3.1_qr LOW https://github.com/baserproject/basercms/security/advisories/GHSA-wpww-4jf4-4hx8
generic_textual LOW https://github.com/baserproject/basercms/security/advisories/GHSA-wpww-4jf4-4hx8
cvssv3.1 7.3 https://nvd.nist.gov/vuln/detail/CVE-2020-15273
generic_textual LOW https://nvd.nist.gov/vuln/detail/CVE-2020-15273
cvssv3.1 7.3 https://packagist.org/packages/baserproject/basercms
generic_textual LOW https://packagist.org/packages/baserproject/basercms
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2020-15273
https://github.com/baserproject/basercms/commit/b70474ef9dcee6ad8826360884625dc7ca9041a1
https://github.com/baserproject/basercms/security/advisories/GHSA-wpww-4jf4-4hx8
https://nvd.nist.gov/vuln/detail/CVE-2020-15273
https://packagist.org/packages/baserproject/basercms
GHSA-wpww-4jf4-4hx8 https://github.com/advisories/GHSA-wpww-4jf4-4hx8
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N Found at https://github.com/baserproject/basercms/commit/b70474ef9dcee6ad8826360884625dc7ca9041a1
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N Found at https://github.com/baserproject/basercms/security/advisories/GHSA-wpww-4jf4-4hx8
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2020-15273
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N Found at https://packagist.org/packages/baserproject/basercms
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.62044
EPSS Score 0.00414
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-12T01:52:56.625182+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.6.0