CVE-2023-43792

baserCMS Code Injection Vulnerability in Mail Form Feature

CVSS 5.3 MEDIUMEPSS 0.6%CWE-94

baserCMS is a website development framework. In versions 4.6.0 through 4.7.6, there is a Code Injection vulnerability in the mail form of baserCMS. As of time of publication, no known patched versions are available.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

baserproject · basercms

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://basercms.net/security/JVN_45547161 https://github.com/baserproject/basercms/security/advisories/GHSA-vrm6-c878-fpq6