CVE-2023-44379
published 2024-02-22CVE-2023-44379: baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the site search feature. Version 5.0.9…
PriorityP424medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
0.47%
37.2th percentile
baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the site search feature. Version 5.0.9 contains a fix for this vulnerability.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| basercms | basercms | < 5.0.9 | 5.0.9 |
| baserproject | basercms | < 5.0.9 | 5.0.9 |
| baserproject | basercms | >= 0 < 5.0.9 | 5.0.9 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
baserCMS Cross-site Scripting vulnerability in Site search Feature
ghsa·2024-02-22
CVE-2023-44379 [MEDIUM] CWE-79 baserCMS Cross-site Scripting vulnerability in Site search Feature
baserCMS Cross-site Scripting vulnerability in Site search Feature
There is a XSS Vulnerability in Site search Feature to baserCMS.
### Target
baserCMS 5.0.8 and earlier versions
### Vulnerability
Malicious code may be executed in Site search Feature.
### Countermeasures
Update to the latest version of baserCMS
Please refer to the following page to reference for more information.
https://basercms.net/security/JVN_73283159
OSV
baserCMS Cross-site Scripting vulnerability in Site search Feature
osv·2024-02-22
CVE-2023-44379 [MEDIUM] baserCMS Cross-site Scripting vulnerability in Site search Feature
baserCMS Cross-site Scripting vulnerability in Site search Feature
There is a XSS Vulnerability in Site search Feature to baserCMS.
### Target
baserCMS 5.0.8 and earlier versions
### Vulnerability
Malicious code may be executed in Site search Feature.
### Countermeasures
Update to the latest version of baserCMS
Please refer to the following page to reference for more information.
https://basercms.net/security/JVN_73283159
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://basercms.net/security/JVN_73283159https://github.com/baserproject/basercms/commit/18549396e5a9b8294306a54a876af164b0b57da4https://github.com/baserproject/basercms/security/advisories/GHSA-66c2-p8rh-qx87https://basercms.net/security/JVN_73283159https://github.com/baserproject/basercms/commit/18549396e5a9b8294306a54a876af164b0b57da4https://github.com/baserproject/basercms/security/advisories/GHSA-66c2-p8rh-qx87
2024-02-22
Published