GHSA-vh89-rjph-2g7p
baserCMS has an SQL injection vulnerability in its blog post functionality
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | baserproject/basercms | < 5.2.3 | 5.2.3 |
Details
As written in the advisory (Markdown source, shown as plain text).
baserCMS has a SQL injection vulnerability in blog posts.
### Target
baserCMS 5.2.2 and earlier versions
### Vulnerability
Malicious SQL may be executed in blog posts.
### Countermeasures
Update to the latest version of baserCMS
Please refer to the following page to reference for more information.
https://basercms.net/security/JVN_52157568
### Credits
Mirai Matsumoto@Future Secure Wave, Inc.
References
External links from the advisory. They lead to third-party sites.