Skip to content
OpenAdvisories
Unscored CVE-2016-4887 EUVD-2016-5863GHSA-gxqg-c4hq-9hvc

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Uploader version 3.0.10 and earlier allows remote attackers to hijack th…

Published May 12, 2017 · Updated Aug 6, 2024 · Assigned by jpcert

Vendor: baserCMS Users Community Product: baserCMS plugin Uploader

Description

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Uploader version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

VendorProductAffectedFixed
baserCMS Users Community baserCMS plugin Uploader version 3.0.10 and earlier —

References