Vulnerabilities

TI-2026-25226 CVE-2026-32734 · GHSA-677c-xv24-crgx

baserCMS: Multiple vulnerabilities in baserCMS

LOW 31

baserCMS is a website development framework.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00268 Published 2026-03-31 Fixed in 5.2.3 CWE-79

TI-2026-23708 CVE-2026-30879 · GHSA-jmq3-x8q7-j9qm

baserCMS: Cross-site scripting vulnerability in blog post

LOW 36

baserCMS is a website development framework.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00242 Published 2026-03-31 Fixed in 5.2.3 CWE-79

TI-2026-23765 CVE-2026-30940 · GHSA-c5c6-37vq-pjcq

baserCMS: Path Traversal in Theme File API Leads to Arbitrary File Write and RCE

LOW 36

baserCMS is a website development framework.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01067 Published 2026-03-31 Fixed in 5.2.3 CWE-22

TI-2026-23707 CVE-2026-30878 · GHSA-8cr7-r8qw-gp3c

baserCMS: Mail Form Acceptance Bypass via Public API

MEDIUM 63

baserCMS is a website development framework.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00397 Published 2026-03-31 Fixed in 5.2.3 CWE-285

TI-2026-23706 CVE-2026-30877 · GHSA-m9g7-rgfc-jcm7

baserCMS: OS Command Injection in the baserCMS Update Functionality

MEDIUM 44

baserCMS is a website development framework.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01543 Published 2026-03-31 Fixed in 5.2.3 CWE-78

TI-2026-23709 CVE-2026-30880 · GHSA-6hpg-8rx3-cwgv

baserCMS: OS command injection vulnerability in installer

MEDIUM 46

baserCMS is a website development framework.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.02069 Published 2026-03-31 Fixed in 5.2.3 CWE-78

TI-2026-22074 CVE-2026-27697 · GHSA-vh89-rjph-2g7p

baserCMS: SQL injection vulnerability in blog post

LOW 37

baserCMS is a website development framework.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00428 Published 2026-03-31 Fixed in 5.2.3 CWE-89

TI-2026-17563 CVE-2026-21861 · GHSA-qxmc-6f24-g86g

baserCMS: OS Command Injection Leading to Remote Code Execution (RCE)

HIGH 74

baserCMS is a website development framework.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02322 Published 2026-03-31 Fixed in 5.2.3 CWE-78

TI-2025-23967 CVE-2025-32957 · GHSA-hv78-cwp4-8r7r

baserCMS: unsafe File Upload Leading to Remote Code Execution (RCE)

HIGH 73

baserCMS is a website development framework.

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.00587 Published 2026-03-31 Fixed in 5.2.3 CWE-434

TI-2024-31386 CVE-2024-46998 · GHSA-p3m2-mj3j-j49x

baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature

LOW 31

baserCMS is a website development framework.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00361 Published 2024-10-24 Fixed in 5.1.2 CWE-79

TI-2024-31384 CVE-2024-46996 · GHSA-66jv-qrm3-vvfg

baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature

LOW 28

baserCMS is a website development framework.

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00326 Published 2024-10-24 Fixed in 5.1.2 CWE-79

TI-2024-31383 CVE-2024-46995 · GHSA-mr7q-fv7j-jcgv

baserCMS has Cross-site Scripting Vulnerability in HTTP 400 Bad Request

LOW 27

baserCMS is a website development framework.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00346 Published 2024-10-24 Fixed in 5.1.2 CWE-79

TI-2024-31382 CVE-2024-46994 · GHSA-wrjc-fmfq-w3jr

baserCMS has Cross-site Scripting Vulnerability in Blog posts and Contents list Feature

LOW 24

baserCMS is a website development framework.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00305 Published 2024-10-24 Fixed in 5.1.2 CWE-79

TI-2024-17219 CVE-2024-26128 · GHSA-jjxq-m8h3-4vw5

baserCMS Cross-site Scripting vulnerability in Content Management

LOW 25

baserCMS is a website development framework.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00572 Published 2024-02-22 Fixed in 5.0.9 CWE-79

TI-2023-28104 CVE-2023-51450 · GHSA-77fc-4cv5-hmfr

baserCMS OS command injection vulnerability in Installer

LOW 38

baserCMS is a website development framework.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01455 Published 2024-02-22 Fixed in 5.0.9 CWE-78

TI-2023-23886 CVE-2023-44379 · GHSA-66c2-p8rh-qx87

baserCMS Cross-site Scripting vulnerability in Site search Feature

LOW 28

baserCMS is a website development framework.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0047 Published 2024-02-22 Fixed in 5.0.9 CWE-79

TI-2023-23483 CVE-2023-43792 · GHSA-vrm6-c878-fpq6

baserCMS Code Injection Vulnerability in Mail Form Feature

MEDIUM 49

baserCMS is a website development framework.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00675 Published 2023-10-30 No fix listed CWE-94

TI-2023-23375 CVE-2023-43649 · GHSA-fw9x-cqjq-7jx5

baserCMS CSRF vulnerability in Content preview Feature

MEDIUM 42

baserCMS is a website development framework.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00421 Published 2023-10-30 Fixed in 4.8.0 CWE-352

TI-2023-23374 CVE-2023-43648 · GHSA-hmqj-gv2m-hq55

baserCMS Directory Traversal vulnerability in Form submission data management Feature

LOW 31

baserCMS is a website development framework.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01207 Published 2023-10-30 Fixed in 4.8.0 CWE-22

TI-2023-23373 CVE-2023-43647 · GHSA-ggj4-78rm-6xgv

baserCMS Cross-site Scripting vulnerability in File upload Feature

LOW 28

baserCMS is a website development framework.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00609 Published 2023-10-30 Fixed in 4.8.0 CWE-79

TI-2023-13470 CVE-2023-29009 · GHSA-8vqx-prq4-rqrq

basercms XSS Vulnerability via Favorites Feature

LOW 28

baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00555 Published 2023-10-27 Fixed in 4.8.0 CWE-79

TI-2023-10936 CVE-2023-25655 · GHSA-mfvg-qwcw-qvc8

baserCMS allows any file to be uploaded

MEDIUM 51

baserCMS is a Content Management system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01089 Published 2023-03-23 Fixed in 4.7.5 CWE-434

TI-2023-10935 CVE-2023-25654 · GHSA-h4cc-fxpp-pgw9

baserCMS File Uploader Remote Code Execution (RCE) vulnerability

MEDIUM 52

baserCMS is a Content Management system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01533 Published 2023-03-23 Fixed in 4.7.4, 4.7.5 CWE-434

TI-2022-20681 CVE-2022-42486 · GHSA-7w2v-35j3-xrm9

Cross-site scripting in baserproject baserCMS

LOW 25

Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00625 Published 2022-12-07 Fixed in 4.7.2 CWE-79

TI-2022-20334 CVE-2022-41994 · GHSA-vxwf-79ch-f7f7

Cross-site scripting in baserproject baserCMS

LOW 23

Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00625 Published 2022-12-07 Fixed in 4.7.2 CWE-79

Vulnerabilities

Filters