high7.2
CVE-2021-20682
OS Command Injection in baserCMS
Impact
baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via upload of malicious plugins.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | baserproject/basercms | < 4.4.5 | 4.4.5 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Basercms | Basercms | before 4.4.5 |