Basercms Security Vulnerabilities and Issues — Basercms CVE List

Lucene search

BaserprojectBasercms

5 matches found

CVE•added 2023/10/30 7:15 p.m.•56 views

CVE-2023-43647

baserCMS is a website development framework. Prior to version 4.8.0, there is a cross-site scripting vulnerability in the file upload feature of baserCMS. Version 4.8.0 contains a patch for this issue.

6.1CVSS5.6AI score0.00572EPSS

CVE•added 2023/10/30 9:15 p.m.•56 views

CVE-2023-43792

baserCMS is a website development framework. In versions 4.6.0 through 4.7.6, there is a Code Injection vulnerability in the mail form of baserCMS. As of time of publication, no known patched versions are available.

9.8CVSS7.4AI score0.0034EPSS

CVE•added 2023/10/30 7:15 p.m.•54 views

CVE-2023-43649

baserCMS is a website development framework. Prior to version 4.8.0, there is a cross site request forgery vulnerability in the content preview feature of baserCMS. Version 4.8.0 contains a patch for this issue.

9.8CVSS6.8AI score0.00107EPSS

CVE•added 2023/10/27 8:15 p.m.•47 views

CVE-2023-29009

baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS. This issue has been patched in version 4.8.0.

6.1CVSS5.9AI score0.0055EPSS

CVE•added 2023/10/30 7:15 p.m.•47 views

CVE-2023-43648

baserCMS is a website development framework. Prior to version 4.8.0, there is a Directory Traversal Vulnerability in the form submission data management feature of baserCMS. Version 4.8.0 contains a patch for this issue.

6.5CVSS5.5AI score0.00263EPSS