CVE-2016-1169

CVE-2016-1169 is a cross-site scripting (XSS) vulnerability in the Casebook plugin for baserCMS, affecting versions prior to 0.9.4. The connected sources (CNVD/JVN/NVD) confirm an XSS flaw that allows remote attackers to inject arbitrary script or HTML via unspecified vectors. Impact is described...

CVE-2016-1171

The CVE-2016-1171 issue affects the baserCMS Recruit plugin, specifically versions prior to 0.9.3. A cross-site scripting (XSS) vulnerability exists that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. "Recruit" is described as a job-listing plugin for base...

CVE-2016-1173

The CVE-2016-1173 issue affects the Menubook plugin for baserCMS prior to 0.9.3, described as a Cross-Site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The vulnerability originates in the Menubook plugin’s handling of i...

CVE-2016-1170

The CVE-2016-1170 entry describes a Cross-site request forgery (CSRF) vulnerability in the Casebook plugin for baserCMS, affecting versions prior to 0.9.4. Root cause: CSRF in the Casebook plugin allows remote attackers to hijack administrator authentication. Impact: arbitrary administrator actio...

CVE-2016-1174

CVE-2016-1174 affects the Menubook plugin for baserCMS, versions prior to 0.9.3. The vulnerability is a CSRF flaw in the plugin that allows remote attackers to hijack the authentication of administrators. The affected component is the Menubook plugin; root cause is CSRF in that plugin. Exploitati...

CVE-2016-1172

CVE-2016-1172 is a CSRF vulnerability in the baserCMS Recruit plugin prior to version 0.9.3 that can hijack administrator sessions. Multiple sources (NVD, CNVD, PRION, CVE list) corroborate the affected plugin and vulnerability description. CVSS‑3.0 base score is 8.8 (High) with NETWORK attack ve...