critical9.8
CVE-2023-43792
baserCMS Code Injection Vulnerability in Mail Form Feature
Impact
There is a Code Injection Vulnerability in Mail Form to baserCMS. ### Target baserCMS 4.7.6 and earlier versions ### Vulnerability Malicious code may be executed in Mail Form Feature. ### Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference for more information. https://basercms.net/security/JVN_45547161 ### Credits Shiga Takuma@BroadBand Security, Inc
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | baserproject/basercms | >= 4.6.0, <= 4.7.6 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Basercms | Basercms | from 4.6.0 through 4.7.6 |