CVE-2023-51450: 
PHP vulnerability analysis and mitigation

CVE-2023-51450 affects baserCMS, a website development framework. The vulnerability was discovered in versions prior to 5.0.9 and involves an OS Command Injection vulnerability in the site search feature. The issue was disclosed on February 22, 2024, and has been assigned a CVSS 3.1 base score of 8.1 (HIGH) by NVD and 5.6 (MEDIUM) by GitHub (NVD, GitHub Advisory).

The vulnerability is classified as CWE-78 (Improper Neutralization of Special Elements used in an OS Command). The CVSS 3.1 vector string from NVD indicates AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, suggesting that the vulnerability is network-accessible, requires high attack complexity, needs no privileges or user interaction, and can potentially result in high impacts to confidentiality, integrity, and availability (NVD).

If exploited, the vulnerability could allow malicious command execution through the site search feature, potentially compromising the affected system's confidentiality, integrity, and availability (GitHub Advisory).

The vulnerability has been fixed in baserCMS version 5.0.9. Users are advised to update to this version or later to address the security issue (GitHub Advisory).