CVE-2023-29009 (published 2023-10-27T19:30:18.390Z)
baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS. This issue has been patched in version 4.8.0.

Affected products: Vendor: baserproject
Product: basercms
Versions: < 4.8.0