CVE-2023-43792

CRITICAL

baserCMS Code Injection Vulnerability in Mail Form Feature

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-43792 has a selected CVSS score of 9.8 (critical).

Description

baserCMS is a website development framework. In versions 4.6.0 through 4.7.6, there is a Code Injection vulnerability in the mail form of baserCMS. As of time of publication, no known patched versions are available.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 5, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

basercms

Browse baserproject / basercms
CVE List>= 4.6.0, <= 4.7.6affected

baserproject/basercms

Browse Packagist / baserproject/basercms
GitHub Advisory4.6.0 to ≤ 4.7.6affected

References

4