CVE-2023-43792

Description

There is a Code Injection Vulnerability in Mail Form to baserCMS. ### Target baserCMS 4.7.6 and earlier versions ### Vulnerability Malicious code may be executed in Mail Form Feature. ### Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference for more information. https://basercms.net/security/JVN_45547161 ### Credits Shiga Takuma@BroadBand Security, Inc

Affected packages (1)

• Packagist/baserproject/basercms>= 4.6.0, <= 4.7.6

CVSS scores

References (4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-43792
• PATCHhttps://github.com/baserproject/basercms
• WEBhttps://basercms.net/security/JVN_45547161
• WEBhttps://github.com/baserproject/basercms/security/advisories/GHSA-vrm6-c878-fpq6