Security Advisory
CVE-2018-18942
7.2
HIGH
Vulnerability Description
In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php allows remote attackers to execute arbitrary PHP code via the admin/theme_configs/form data[ThemeConfig][logo] parameter.
Published Date
November 5, 2018
Official Source
NIST NVD Advisory