ゴンドー

3 exploits Active since Oct 2023
CVE-2023-43647 WRITEUP MEDIUM WRITEUP
baserCMS <4.8.0 - XSS
baserCMS is a website development framework. Prior to version 4.8.0, there is a cross-site scripting vulnerability in the file upload feature of baserCMS. Version 4.8.0 contains a patch for this issue.
CVSS 6.1
CVE-2023-43648 WRITEUP MEDIUM WRITEUP
baserCMS <4.8.0 - Path Traversal
baserCMS is a website development framework. Prior to version 4.8.0, there is a Directory Traversal Vulnerability in the form submission data management feature of baserCMS. Version 4.8.0 contains a patch for this issue.
CVSS 4.9
CVE-2023-43649 WRITEUP MEDIUM WRITEUP
baserCMS <4.8.0 - CSRF
baserCMS is a website development framework. Prior to version 4.8.0, there is a cross site request forgery vulnerability in the content preview feature of baserCMS. Version 4.8.0 contains a patch for this issue.
CVSS 4.7