ゴンドー

3 exploits Active since Oct 2023
CVE-2023-43647 WRITEUP MEDIUM WRITEUP
baserCMS < 4.8.0 - Stored Cross-Site Scripting via File Upload Feature
baserCMS is a website development framework. Prior to version 4.8.0, there is a cross-site scripting vulnerability in the file upload feature of baserCMS. Version 4.8.0 contains a patch for this issue.
CVSS 6.1
CVE-2023-43648 WRITEUP MEDIUM WRITEUP
baserCMS < 4.8.0 - Path Traversal via Form Submission Data Management
baserCMS is a website development framework. Prior to version 4.8.0, there is a Directory Traversal Vulnerability in the form submission data management feature of baserCMS. Version 4.8.0 contains a patch for this issue.
CVSS 4.9
CVE-2023-43649 WRITEUP MEDIUM WRITEUP
baserCMS < 4.8.0 - Cross-Site Request Forgery in Content Preview Feature
baserCMS is a website development framework. Prior to version 4.8.0, there is a cross site request forgery vulnerability in the content preview feature of baserCMS. Version 4.8.0 contains a patch for this issue.
CVSS 4.7