CVE-2016-4881

2017-05-1218:29:00

Google

osv.dev

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.0%

JSON

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CPENameOperatorVersion
basercmseqbasercms-3.0.6.1
basercmseqbasercms-2.0.0
basercmseqbasercms-3.0.10
basercmseqbasercms-2.0.0-beta
basercmseqbasercms-3.0.9
basercmseqbasercms-3.0.4
basercmseqbasercms-3.0.6-beta
basercmseqbasercms-3.0.5
basercmseqbasercms-2.0.1
basercmseqbasercms-2.0.3

Name	Operator	Version
basercms	eq	basercms-3.0.6.1
basercms	eq	basercms-2.0.0
basercms	eq	basercms-3.0.10
basercms	eq	basercms-2.0.0-beta
basercms	eq	basercms-3.0.9
basercms	eq	basercms-3.0.4
basercms	eq	basercms-3.0.6-beta
basercms	eq	basercms-3.0.5
basercms	eq	basercms-2.0.1
basercms	eq	basercms-2.0.3