CVE-2023-29009: basercms XSS Vulnerability via Favorites Feature
baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS. This issue has been patched in version 4.8.0.
Other sources
There is a XSS Vulnerability in Favorites Feature to baserCMS.
This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible.
Target baserCMS 4.7.8 and earlier versions
Vulnerability Malicious code could be executed in the Favorites feature on the server.
Countermeasures Update to the latest version of baserCMS
Please refer to the following page to reference for more information. https://basercms.net/security/JVN45547161
Credits ota kyohei
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for the XSS Vulnerability in the Favorites Feature to baserCMS?
The vulnerability ID for the XSS Vulnerability in the Favorites Feature to baserCMS is CVE-2023-29009.
What is the severity of CVE-2023-29009?
The severity of CVE-2023-29009 is medium, with a severity value of 6.3.
What is the affected software version for CVE-2023-29009?
The affected software version for CVE-2023-29009 is baserCMS 4.7.8 and earlier.
How do I fix CVE-2023-29009?
To fix CVE-2023-29009, update to baserCMS version 4.8.0 or later.
What is the common weakness enumeration (CWE) for CVE-2023-29009?
The common weakness enumeration (CWE) for CVE-2023-29009 is CWE-79.