CVE-2016-4878: Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attack...

Security readout for executives and security teams

baserCMS 3.0.10 and earlier has a CSRF issue that could let an attacker abuse a logged-in administrator’s browser. The public record does not describe the exact vector, severity score, or confirmed exploitation, so urgency depends on whether affected baserCMS admin users are exposed in your environment. Organizations running baserCMS version 3.0.10 or earlier are potentially exposed, especially where administrators use browser sessions for site management. Exposure evidence is incomplete because the sources do not define affected configurations, endpoints, or required privileges beyond administrator authentication. Prioritize assessment if baserCMS supports public-facing or business-critical sites. There is no confirmed exploitation in the provided evidence, but administrator-level abuse could affect site integrity if an affected deployment remains in use. Mitigation focus: Check baserCMS and JVN guidance for the fixed version or official workaround.; Identify and prioritize baserCMS instances at version 3.0.10 or earlier.; Restrict administrative interfaces to trusted networks where operationally feasible..

Prepared

Jun 13, 2026, 05:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.