CVE-2023-29009

MEDIUM

basercms XSS Vulnerability via Favorites Feature

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-29009 has a selected CVSS score of 6.1 (medium).

Description

baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS. This issue has been patched in version 4.8.0.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 9, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

basercms

Browse baserproject / basercms
CVE List< 4.8.0affected

baserproject/basercms

Browse Packagist / baserproject/basercms
GitHub AdvisoryBefore 4.8.0 · Fixed in 4.8.0affected

References

6