CVE-2023-44379

Summary

CVE-2023-44379 is a newly identified cross-site scripting (XSS) vulnerability affecting baserCMS, a popular website development framework. This issue resides in the site search feature, which, prior to version 5.0.9, did not adequately sanitize user input. As a result, an attacker could inject malicious scripts into search queries, potentially stealing sensitive information or taking control of user sessions. To mitigate this risk, users are strongly advised to upgrade to the latest version, 5.0.9, which includes a fix for this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.