Minhnn42

**Name of the Vulnerable Software and Affected Versions** baserCMS versions prior to 5.2.3 **Description** baserCMS is a website development framework. Prior to version 5.2.3, it contains a SQL injection flaw within blog posts. The issue allows for potential unauthorized access or modification of data through crafted SQL queries. The vulnerable component is related to the processing of blog post content. The `blog posts` functionality is affected. **Recommendations** Update baserCMS to version 5.2.3 or later.

**Name of the Vulnerable Software and Affected Versions** baserCMS versions prior to 5.2.3 **Description** baserCMS is a website development framework that contains a DOM-based cross-site scripting issue in tag creation. **Recommendations** Update to version 5.2.3 or later.

**Name of the Vulnerable Software and Affected Versions** Concrete CMS versions prior to 9.4.8 **Description** A user with edit permissions on a page containing a Legacy form can execute a stored Cross-Site Scripting (XSS) attack targeting high-privilege accounts through the Question field. This allows an attacker to inject malicious scripts that execute within the context of another user's browser. **Recommendations** Update to version 9.4.8 or later.