CVE-2016-4887: Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Uploader version 3.0.10 and earlier allo...

Security readout for executives and security teams

This issue affects the baserCMS Uploader plugin version 3.0.10 and earlier. A remote attacker may be able to abuse an administrator’s authenticated browser session through cross-site request forgery. The public sources do not provide CVSS scoring, detailed vectors, active exploitation evidence, or a specific fixed version in the provided bundle. Exposure is limited to sites running baserCMS with the Uploader plugin at version 3.0.10 or earlier, especially where administrators access the CMS through active authenticated sessions. Treat this as a targeted CMS administration risk. Prioritize remediation for internet-facing or business-critical baserCMS sites with active administrator use, but do not classify it as emergency without additional exploit evidence. Mitigation focus: Inventory baserCMS deployments and identify Uploader plugin versions.; Check baserCMS and JVN guidance for a fixed release or official workaround.; Upgrade or mitigate according to vendor guidance when confirmed..

Prepared

Jun 13, 2026, 05:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.