https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2016-1174.htmlhttps://patchthecve.com/cve/CVE-2016-1174.htmlWed, 17 Jun 2026 00:41:24 +0000HIGH 8.8: Cross-site request forgery (CSRF) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators.https://patchthecve.com/cve/CVE-2016-1173.htmlhttps://patchthecve.com/cve/CVE-2016-1173.htmlWed, 17 Jun 2026 00:41:24 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.https://patchthecve.com/cve/CVE-2016-1172.htmlhttps://patchthecve.com/cve/CVE-2016-1172.htmlWed, 17 Jun 2026 00:41:24 +0000HIGH 8.8: Cross-site request forgery (CSRF) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators.https://patchthecve.com/cve/CVE-2016-1171.htmlhttps://patchthecve.com/cve/CVE-2016-1171.htmlWed, 17 Jun 2026 00:41:24 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.https://patchthecve.com/cve/CVE-2016-1170.htmlhttps://patchthecve.com/cve/CVE-2016-1170.htmlWed, 17 Jun 2026 00:41:24 +0000HIGH 8.8: Cross-site request forgery (CSRF) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack the authentication of administrators.https://patchthecve.com/cve/CVE-2016-1169.htmlhttps://patchthecve.com/cve/CVE-2016-1169.htmlWed, 17 Jun 2026 00:41:24 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.