EPSS
Percentile
53.7%
baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the “File” field is being used in the mail form.
jvn.jp/en/jp/JVN78151490/index.html
basercms.net/security/JVN78151490
nvd.nist.gov/vuln/detail/CVE-2017-10843