Vulnerabilities

TI-2022-09897 CVE-2022-26607 · GHSA-xc7v-jvj9-p5fm

A remote code execution (RCE) vulnerability in baigo CMS v3.0-alpha-2 was discovered to…

LOW 36

A remote code execution (RCE) vulnerability in baigo CMS v3.0-alpha-2 was discovered to allow attackers to execute arbitrary code via uploading a crafted PHP file.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02151 Published 2022-04-06 No fix listed CWE-434

TI-2020-13876 CVE-2020-20584 · GHSA-jh98-h59f-2x68

A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute…

LOW 30

A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML via the form parameter post to /public/console/profile/info-submit/.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01135 Published 2021-07-08 No fix listed CWE-79

TI-2019-07351 CVE-2019-10015 · GHSA-v2p2-mj8c-jjfr

baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the…

LOW 35

baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, because this code is written to the BG_SITE_NAME field in the opt_base.inc.php file.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01841 Published 2019-03-24 No fix listed CWE-94

TI-2019-06682 CVE-2019-9227 · GHSA-3hc3-93hv-h8f3

An issue was discovered in baigo CMS 2.1.1.

MEDIUM 48

An issue was discovered in baigo CMS 2.1.1.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03736 Published 2019-02-28 No fix listed CWE-94

TI-2019-06681 CVE-2019-9226 · GHSA-7j8v-fqpm-q3jp

An issue was discovered in baigo CMS 2.1.1.

LOW 29

An issue was discovered in baigo CMS 2.1.1.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01105 Published 2019-02-28 No fix listed CWE-79

TI-2018-11800 CVE-2018-16458 · GHSA-g3j8-f52j-p4j2

An issue was discovered in baigo CMS v2.1.1.

LOW 29

An issue was discovered in baigo CMS v2.1.1.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00422 Published 2018-09-04 No fix listed CWE-352

Vulnerabilities

Filters

A remote code execution (RCE) vulnerability in baigo CMS v3.0-alpha-2 was discovered to…

A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute…

baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the…

An issue was discovered in baigo CMS 2.1.1.

An issue was discovered in baigo CMS 2.1.1.

An issue was discovered in baigo CMS v2.1.1.