Executive brief
Edit template, Remote Code Execution (RCE) Vulnerability in Latest Release 4.4.0
Affected products
- Packagist baserproject/basercms
Junglewise Threat Intelligence
CVE-2020-15277: Edit template, Remote Code Execution (RCE) Vulnerability in Latest Release 4.4.0
CVE-2020-15277 · Severity: low · CVSS 3.1 · Published 2020-10-30
Technologies: baserproject/basercms (Packagist). Vendors: Packagist.
Related threats
- baserCMS is Vulnerable to Cross-site Scripting
- baserCMS Path Traversal Leads to Arbitrary File Write and RCE via Theme File API
- baserCMS has OS command injection vulnerability in installer
- baserCMS has a cross-site scripting vulnerability in blog posts
- baserCMS has Mail Form Acceptance Bypass via Public API