CVE-2016-4876: Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attack...

Security readout for executives and security teams

baserCMS 3.0.10 and earlier has a CSRF issue that could let an attacker abuse a logged-in administrator’s browser to run arbitrary PHP code. That means site control could be at risk if an administrator is tricked while authenticated. Exposure is limited to organizations running baserCMS version 3.0.10 or earlier, especially where administrators use the CMS over reachable web interfaces. Systems not running baserCMS, or running versions outside the stated range, are not identified as affected by the provided sources. Treat this as high priority for affected baserCMS deployments because the stated impact is arbitrary PHP code execution through administrator session abuse. Urgency is lower where baserCMS is absent or administrator access is tightly restricted. Mitigation focus: Inventory baserCMS deployments and identify versions 3.0.10 or earlier.; Review the JVN and baserCMS advisory pages for vendor remediation guidance.; Limit administrator access to trusted networks or VPN where feasible..

Prepared

Jun 13, 2026, 05:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.