Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2023-44379

MEDIUM
Published 2024-02-22T14:47:14.333Z
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2023-44379. We'll provide specific mitigation strategies based on your environment and risk profile.

CVSS Score

V3.1
6.1
/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Base Score Metrics
Exploitability: N/A Impact: N/A

EPSS Score

v2025.03.14
0.005
probability
of exploitation in the wild

There is a 0.5% chance that this vulnerability will be exploited in the wild within the next 30 days.

Updated: 2025-06-25
Exploit Probability
Percentile: 0.630
Higher than 63.0% of all CVEs

Attack Vector Metrics

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED

Impact Metrics

Confidentiality
LOW
Integrity
LOW
Availability
NONE

Description

baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the site search feature. Version 5.0.9 contains a fix for this vulnerability.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

baserproject

basercms

Affected Versions:

< 5.0.9

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

✓ GitHub Reviewed MODERATE

baserCMS Cross-site Scripting vulnerability in Site search Feature

GHSA-66c2-p8rh-qx87

Advisory Details

There is a XSS Vulnerability in Site search Feature to baserCMS. ### Target baserCMS 5.0.8 and earlier versions ### Vulnerability Malicious code may be executed in Site search Feature. ### Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference for more information. https://basercms.net/security/JVN_73283159

Affected Packages

Packagist baserproject/basercms
ECOSYSTEM: ≥0 <5.0.9

CVSS Scoring

CVSS Score

5.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References

WEB https://github.com/baserproject/basercms/security/advisories/GHSA-66c2-p8rh-qx87
ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2023-44379
WEB https://github.com/baserproject/basercms/commit/18549396e5a9b8294306a54a876af164b0b57da4
WEB https://basercms.net/security/JVN_73283159
PACKAGE https://github.com/baserproject/basercms

Advisory provided by GitHub Security Advisory Database. Published: February 22, 2024, Modified: December 18, 2024

References

https://github.com/baserproject/basercms/security/advisories/GHSA-66c2-p8rh-qx87
https://github.com/baserproject/basercms/commit/18549396e5a9b8294306a54a876af164b0b57da4
https://basercms.net/security/JVN_73283159
Published: 2024-02-22T14:47:14.333Z
Last Modified: 2025-04-22T16:19:39.790Z
Copied to clipboard!