This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users.
If you are eligible, please update to the new version as soon as possible.

### Target
baserCMS 4.7.8 and earlier versions

### Vulnerability
Malicious code may be executed in Content preview Feature.

### Countermeasures
Update to the latest version of baserCMS

Please refer to the following page to reference for more information.
https://basercms.net/security/JVN_45547161

### Credits
Shiga Takuma@BroadBand Security, Inc

Affected Packages

Packagist baserproject/basercms

Affected versions: 0 (fixed in 4.8.0)

Related CVEs

CVE-2023-43649

Key Information

GHSA ID

GHSA-fw9x-cqjq-7jx5

Published

October 26, 2023 8:48 PM

Last Modified

October 26, 2023 8:48 PM

CVSS Score

5.0 /10

Primary Ecosystem

Packagist

Primary Package

baserproject/basercms

GitHub Reviewed

✓ Yes

Dataset

Last updated: July 12, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.