~ / search / GHSA-vrm6-c878-fpq6

GHSA-vrm6-c878-fpq6

baserCMS Code Injection Vulnerability in Mail Form Feature

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-43792

Packages

EcosystemPackageAffectedFixed in
Packagist baserproject/basercms >= 4.6.0, <= 4.7.6 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

There is a Code Injection Vulnerability in Mail Form to baserCMS. ### Target baserCMS 4.7.6 and earlier versions ### Vulnerability Malicious code may be executed in Mail Form Feature. ### Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference for more information. https://basercms.net/security/JVN_45547161 ### Credits Shiga Takuma@BroadBand Security, Inc

References

External links from the advisory. They lead to third-party sites.