Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-43792 EUVD-2023-2820GHSA-vrm6-c878-fpq6

baserCMS Code Injection Vulnerability in Mail Form Feature

Published Oct 30, 2023 · Updated Sep 5, 2024 · Assigned by GitHub_M

Description

baserCMS is a website development framework. In versions 4.6.0 through 4.7.6, there is a Code Injection vulnerability in the mail form of baserCMS. As of time of publication, no known patched versions are available.

Affected products

VendorProductAffectedFixed
baserproject basercms >= 4.6.0, <= 4.7.6 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist baserproject/basercms >= 4.6.0, <= 4.7.6 — GHSA-vrm6-c878-fpq6

References