CVE-2023-43647: baserCMS Cross-site Scripting vulnerability in File upload Feature
baserCMS is a website development framework. Prior to version 4.8.0, there is a cross-site scripting vulnerability in the file upload feature of baserCMS. Version 4.8.0 contains a patch for this issue.
Other sources
There is a XSS Vulnerability in File upload Feature to baserCMS.
This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible.
Target baserCMS 4.7.8 and earlier versions
Vulnerability Malicious code may be executed in File upload Feature.
Countermeasures Update to the latest version of baserCMS
Please refer to the following page to reference for more information. https://basercms.net/security/JVN45547161
Credits Shiga Takuma@BroadBand Security, Inc
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-43647.
What is the severity of CVE-2023-43647?
The severity of CVE-2023-43647 is medium with a CVSS score of 6.1.
What is the affected software version?
The affected software version is baserCMS 4.7.8 and earlier.
How can I fix CVE-2023-43647?
To fix CVE-2023-43647, please update to baserCMS version 4.8.0 or later.
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The Common Weakness Enumeration (CWE) ID for this vulnerability is CWE-79.