BaserCMS Cross-Site Scripting and Remote Code Execution Vulnerabilities

BaserCMS is an open source enterprise-level content management system cms. A cross-site scripting and remote code execution vulnerability exists in the ThemeFilesController.php and UploaderFilesController.php components in baserCMS 4.3.6 and earlier versions. An attacker can exploit this...