CVE-2023-43647

Summary

CVE-2023-43647 is a cross-site scripting (XSS) vulnerability affecting the file upload feature in baserCMS, a website development framework, prior to version 4.8.0. An attacker could exploit this flaw to inject and execute malicious scripts in users' browsers, potentially leading to unauthorized account takeover or data theft. The vulnerability has been addressed in version 4.8.0, which includes a patch to prevent such attacks. Users are strongly advised to upgrade to this version to protect against this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.