Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected Packages

Packagist baserproject/basercms

Affected versions: 0 (fixed in 3.0.11)

Related CVEs

CVE-2016-4878

Key Information

GHSA ID

GHSA-fg52-rc36-jp43

Published

May 17, 2022 2:45 AM

Last Modified

July 7, 2023 9:02 PM

CVSS Score

7.5 /10

Primary Ecosystem

Packagist

Primary Package

baserproject/basercms

GitHub Reviewed

✓ Yes

Dataset

Last updated: September 16, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.