https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:46:50.404530+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2023-86331 cnvd-2023-86331 2026-10-03T17:46:50.494197+00:00 cnvd-2023-86331 https://cve.radiocsirt.org/vuln/euvd-2026-161757 EUVD-2026-161757 2026-10-03T17:46:50.494233+00:00 EUVD-2026-161757 https://cve.radiocsirt.org/vuln/fkie_cve-2023-43648 fkie_cve-2023-43648 2026-10-03T17:46:50.494248+00:00

baserCMS is a website development framework. Prior to version 4.8.0, there is a Directory Traversal Vulnerability in the form submission data management feature of baserCMS. Version 4.8.0 contains a patch for this issue.

 https://cve.radiocsirt.org/vuln/ghsa-hmqj-gv2m-hq55 GHSA-hmqj-gv2m-hq55 — baserCMS Directory Traversal vulnerability in Form submission data management Feature 2026-10-03T17:46:50.494278+00:00

Affected: Packagist: baserproject/basercms

There is a Directory Traversal Vulnerability in Form submission data management Feature to baserCMS.

This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible.

### Target baserCMS 4.7.8 and earlier versions

### Vulnerability There is a possibility that information on the server may be obtained by a user who is logged in to the management screen.

### Countermeasures Update to the latest version of baserCMS

Please refer to the following page to reference for more information. https://basercms.net/security/JVN_45547161

### Credits Shiga Takuma@BroadBand Security, Inc

 https://cve.radiocsirt.org/vuln/gsd-2023-43648 gsd-2023-43648 2026-10-03T17:46:50.494309+00:00 gsd-2023-43648 https://cve.radiocsirt.org/vuln/jvndb-2023-000106 jvndb-2023-000106 2026-10-03T17:46:50.494321+00:00

baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below.<ul><li>Stored cross-site scripting vulnerability (CWE-79) - CVE-2023-29009</li><li>Reflected cross-site scripting vulnerability (CWE-79) - CVE-2023-43647</li><li>Directory traversal vulnerability (CWE-22) - CVE-2023-43648</li><li>Cross-site request forgery vulnerability (CWE-352) - CVE-2023-43649</li><li>Arbitrary file upload vulnerability (CWE-434) - CVE-2023-43792</li></ul> CVE-2023-29009 Kyohei Ota reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2023-43647, CVE-2023-43648, CVE-2023-43649, CVE-2023-43792 Shiga Takuma of BroadBand Security, Inc reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.