Skip to content
OpenAdvisories
Unscored CVE-2016-4877 EUVD-2016-5857GHSA-vp53-8q87-xfwc

Cross-site scripting vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote authenticated attackers to inject arbit…

Published May 12, 2017 · Updated Aug 6, 2024 · Assigned by jpcert

Vendor: baserCMS Users Community Product: baserCMS plugin Mail

Description

Cross-site scripting vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

VendorProductAffectedFixed
baserCMS Users Community baserCMS plugin Mail version 3.0.10 and earlier —

References