JVN#13288761: baserCMS plugin "Recruit Plugin" multiple vulnerabilities

baserCMS plugin "Recruit Plugin" contains multiple vulnerabilities: Cross-site scripting CWE-79 - CVE-2016-1169 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:L/Au:S/C:N/I:P/A:N| Base Score: 4.0 Cross-site request forgery...

PT-2016-4619

Name of the Vulnerable Software and Affected Versions baserCMS Recruit plugin versions prior to 0.9.3 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators. Recommendations For versions prior to 0.9.3, update to version 0.9.3 or late...

PT-2016-4618

Name of the Vulnerable Software and Affected Versions baserCMS Recruit plugin versions prior to 0.9.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 0.9.3, update to version 0.9.3 or later to resol...