Vulnerabilities

TI-2022-09897 CVE-2022-26607 · GHSA-xc7v-jvj9-p5fm

A remote code execution (RCE) vulnerability in baigo CMS v3.0-alpha-2 was discovered to…

LOW 36

A remote code execution (RCE) vulnerability in baigo CMS v3.0-alpha-2 was discovered to allow attackers to execute arbitrary code via uploading a crafted PHP file.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02151 Published 2022-04-06 No fix listed CWE-434

TI-2020-13876 CVE-2020-20584 · GHSA-jh98-h59f-2x68

A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute…

LOW 30

A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML via the form parameter post to /public/console/profile/info-submit/.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01135 Published 2021-07-08 No fix listed CWE-79

TI-2019-06682 CVE-2019-9227 · GHSA-3hc3-93hv-h8f3

An issue was discovered in baigo CMS 2.1.1.

MEDIUM 48

An issue was discovered in baigo CMS 2.1.1.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03736 Published 2019-02-28 No fix listed CWE-94

TI-2019-06681 CVE-2019-9226 · GHSA-7j8v-fqpm-q3jp

An issue was discovered in baigo CMS 2.1.1.

LOW 29

An issue was discovered in baigo CMS 2.1.1.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01105 Published 2019-02-28 No fix listed CWE-79

TI-2018-11800 CVE-2018-16458 · GHSA-g3j8-f52j-p4j2

An issue was discovered in baigo CMS v2.1.1.

LOW 29

An issue was discovered in baigo CMS v2.1.1.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00422 Published 2018-09-04 No fix listed CWE-352

Vulnerabilities

Filters

A remote code execution (RCE) vulnerability in baigo CMS v3.0-alpha-2 was discovered to…

A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute…

An issue was discovered in baigo CMS 2.1.1.

An issue was discovered in baigo CMS 2.1.1.

An issue was discovered in baigo CMS v2.1.1.