VDB
Sign up
HIGH8.8

GHSA-69gw-v5ph-6vxq

Code Injection in baserCMS

Details

baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/baserproject/basercms
Introduced in: 0

No fixed version published yet for baserproject/basercms (composer). Pin to a known-safe version or switch to an alternative.

Packagist/baserproject/basercms
Introduced in: 4.0.0

No fixed version published yet for baserproject/basercms (composer). Pin to a known-safe version or switch to an alternative.

References