Read the docs

baserproject

Records79All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high35CVSS 7.0–8.9

Exploited now

baserproject records in CISA KEV

No baserproject vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Basercms 68 records HIGH Mail 2 records MEDIUM

Records

2 records in Mail · all components

TI-2016-04222 CVE-2016-4879 · GHSA-397g-4jpj-44xg

Cross-site request forgery in baserproject baserCMS plugin Mail

Priority MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00878 Published 2017-05-12 No fix listed CWE-352
TI-2016-04220 CVE-2016-4877 · GHSA-vp53-8q87-xfwc

Cross-site scripting in baserproject baserCMS plugin Mail

Priority LOW 26

Cross-site scripting vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00897 Published 2017-05-12 No fix listed CWE-79
Open these records in search →