CVE-2023-43648

CVE-2023-43648 affects baserCMS up to version 4.7.8 and earlier, where a Directory Traversal vulnerability exists in the form submission data management feature. The root cause is insufficient path validation, allowing access to sensitive information. A patch is available in baserCMS 4.8.0; remed...

CVE-2023-43648 baserCMS Directory Traversal vulnerability in Form submission data management Feature

baserCMS is a website development framework. Prior to version 4.8.0, there is a Directory Traversal Vulnerability in the form submission data management feature of baserCMS. Version 4.8.0 contains a patch for this issue...

CVE-2023-43648 baserCMS Directory Traversal vulnerability in Form submission data management Feature

baserCMS is a website development framework. Prior to version 4.8.0, there is a Directory Traversal Vulnerability in the form submission data management feature of baserCMS. Version 4.8.0 contains a patch for this issue...

CVE-2023-43647 baserCMS Cross-site Scripting vulnerability in File upload Feature

baserCMS is a website development framework. Prior to version 4.8.0, there is a cross-site scripting vulnerability in the file upload feature of baserCMS. Version 4.8.0 contains a patch for this issue...

CVE-2023-43647

baserCMS prior to 4.8.0 contains a reflected XSS in the file upload feature (CVE-2023-43647); affected versions include 4.7.8 and earlier per multiple sources. A fix is released in baserCMS 4.8.0.

CVE-2023-43647 baserCMS Cross-site Scripting vulnerability in File upload Feature

baserCMS is a website development framework. Prior to version 4.8.0, there is a cross-site scripting vulnerability in the file upload feature of baserCMS. Version 4.8.0 contains a patch for this issue...

CVE-2023-43647 baserCMS Cross-site Scripting vulnerability in File upload Feature

baserCMS is a website development framework. Prior to version 4.8.0, there is a cross-site scripting vulnerability in the file upload feature of baserCMS. Version 4.8.0 contains a patch for this issue...

Cross Site Scripting

Basercms is vulnerable to Cross Site Scripting. The vulnerability is due to insufficient sanitization of user input, particularly in file upload and management features. This allows an attacker to inject malicious scripts into these variables and that can potentially lead to Cross Site Scripting...

Directory Traversal

basercms is vulnerable to Directory Traversal. The vulnerability is due to improper sanitization and validation in the Form submission data management feature. An attacker can exploit this vulnerability to gain sensitive information from the server...

Code Injection

basercms is vulnerable to Code Injection. The vulnerability is due to improper sanitization in Mail Form Feature. This can be exploited by the attacker by injecting malicious code via the Mail Form...

baserCMS 跨站请求伪造漏洞

baserCMS is an enterprise-level content management system CMS from the baserCMS team. A cross-site request forgery vulnerability exists in baserCMS versions prior to 4.8.0, which stems from the content preview feature not adequately verifying whether a request comes from a trusted user. This...

baserCMS 路径遍历漏洞

baserCMS is an enterprise-level content management system CMS from the baserCMS team. A path traversal vulnerability exists in versions of baserCMS prior to 4.8.0, which stems from a lack of validity checking of paths when processing directory requests by the form submission data management...

baserCMS 代码注入漏洞

baserCMS is an enterprise-level content management system CMS from the baserCMS team. A code injection vulnerability exists in baserCMS versions 4.6.0 through 4.7.6, which stems from the application's failure to properly filter special elements of constructed snippets. An attacker can exploit the...

CVE-2023-29009

baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS. This issue has been patched in version 4.8.0...

Design/Logic Flaw

baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS. This issue has been patched in version 4.8.0...

CVE-2023-29009 basercms XSS Vulnerability via Favorites Feature

baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS. This issue has been patched in version 4.8.0...

CVE-2023-29009 basercms XSS Vulnerability via Favorites Feature

baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS. This issue has been patched in version 4.8.0...

CVE-2023-29009

CVE-2023-29009 affects baserCMS: a stored XSS vulnerability in the Favorites feature on baserCMS WebAPI (PHP8/CakePHP4). Root cause is XSS in the Favorites UI leading to script execution on vulnerable admin/user pages. Impact described in sources includes potential browser-execution of arbitrary ...

CVE-2023-29009 basercms XSS Vulnerability via Favorites Feature

baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS. This issue has been patched in version 4.8.0...

Cross-site Request Forgery (CSRF)

baserCMS is vulnerable to Cross-site Request Forgery CSRF. The vulnerability is due to the content preview feature, which allows an attacker to preform CSRF...