https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T20:02:02.617549+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-08867 cnvd-2016-08867 2026-10-28T20:02:02.621278+00:00 cnvd-2016-08867 https://cve.radiocsirt.org/vuln/euvd-2026-84807 EUVD-2026-84807 2026-10-28T20:02:02.621312+00:00 EUVD-2026-84807 https://cve.radiocsirt.org/vuln/fkie_cve-2016-4879 fkie_cve-2016-4879 2026-10-28T20:02:02.621327+00:00

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-397g-4jpj-44xg GHSA-397g-4jpj-44xg — CSRF in baserCMS 3.0.10 and earlier 2026-10-28T20:02:02.621354+00:00

Affected: Packagist: baserproject/basercms

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2016-4879 gsd-2016-4879 2026-10-28T20:02:02.621378+00:00 gsd-2016-4879 https://cve.radiocsirt.org/vuln/jvndb-2016-000174 jvndb-2016-000174 2026-10-28T20:02:02.621390+00:00

baserCMS provided by baserCMS User Group is an opensource content management system. baserCMS and bundled plugin Mail contain a cross-site request forgery vulnerability. Isao Takaesu of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.