Search vulnerabilities

Results 6

CVE-2016-1170

Cross-site request forgery (CSRF) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack the authentication of administrators.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2016-1172

Cross-site request forgery (CSRF) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2016-1171

Cross-site scripting (XSS) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Products
CVE-2016-1169

Cross-site scripting (XSS) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Products
CVE-2016-1173

Cross-site scripting (XSS) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Products
CVE-2016-1174

Cross-site request forgery (CSRF) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Products