Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2023/10/26 8:52 p.m.25 views

baserCMS Code Injection Vulnerability in Mail Form Feature

There is a Code Injection Vulnerability in Mail Form to baserCMS. Target baserCMS 4.7.6 and earlier versions Vulnerability Malicious code may be executed in Mail Form Feature. Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference for more...

9.8CVSS7.1AI score0.0034EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2023/10/26 8:48 p.m.11 views

GHSA-FW9X-CQJQ-7JX5 baserCMS CSRF vulnerability in Content preview Feature

There is a CSRF Vulnerability in Content preview Feature to baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible. Target baserCMS 4.7.8 and earli...

4.7CVSS7AI score0.00118EPSS
Exploits0References5
OSV
OSV
added 2023/10/26 8:47 p.m.16 views

GHSA-HMQJ-GV2M-HQ55 baserCMS Directory Traversal vulnerability in Form submission data management Feature

There is a Directory Traversal Vulnerability in Form submission data management Feature to baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible...

4.9CVSS5.8AI score0.00289EPSS
Exploits0References5
OSV
OSV
added 2023/10/26 8:47 p.m.8 views

GHSA-GGJ4-78RM-6XGV baserCMS Cross-site Scripting vulnerability in File upload Feature

There is a XSS Vulnerability in File upload Feature to baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible. Target baserCMS 4.7.8 and earlier...

6.1CVSS6AI score0.00572EPSS
Exploits0References5
Patchstack
Patchstack
added 2023/04/27 12:0 a.m.10 views

WordPress LIQUID SPEECH BALLOON Plugin < 1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software LIQUID SPEECH BALLOON Type Plugin Vulnerable versions 1.2 Fixed in 1.2 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-27889 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID b1811e420432 Credits Ryo Sato of BroadBa...

8.8CVSS7AI score0.00248EPSS
Exploits0References3Affected Software1
HackRead
HackRead
added 2021/11/29 4:42 p.m.10 views

How To Secure Your Broadband?

By Owais Sultan Encrypting the Wi-Fi access points can guarantee a stable internet connection by allowing only authorized people to use broadband - Let's dig more into what other options do we have. This is a post from HackRead.com Read the original post: How To Secure Your Broadband?...

2.3AI score
Exploits0
Rows per page
Query Builder