Baserproject Basercms vulnerabilities

• baserproject basercms baserCMS: Unauthenticated Stored XSS via Shortcode Expansion in Blog Comments CVE-2026-115457 7.1 HighOctober 23, 2026
• baserproject basercms baserCMS: PHP object injection via unguarded unserialize() in the widget-area entity CVE-2026-114624 7.2 HighOctober 23, 2026
• baserproject basercms baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosure CVE-2026-114623 6.5 MediumOctober 23, 2026
• baserproject basercms baserCMS: Encoded path traversal bypass in the theme file API CVE-2026-114622 7.2 HighOctober 23, 2026
• baserproject basercms baserCMS: SQL injection in the admin panel and admin API CVE-2026-114621 8.8 HighOctober 23, 2026
• baserproject basercms baserCMS: Public Web API mail-form submission bypasses image CAPTCHA CVE-2026-115480 5.3 MediumOctober 23, 2026
• baserproject basercms baserCMS: Mail-form auto-replies accept multiple visitor-controlled recipients CVE-2026-115479 5.3 MediumOctober 23, 2026
• baserproject basercms baserCMS: BcCustomContent file fields can be configured to allow executable file extensions such as php, leading to arbitrary PHP file upload CVE-2026-115481 8.5 HighOctober 23, 2026
• basercms user community basercms A missing authentication for critical function vulnerability exists in baserCMS. If this vulnerability is exploited, a remote attacker may obtain sensitive information. CVE-2026-93462 6.9 MediumSeptember 30, 2026
• basercms user community basercms A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser. CVE-2026-93464 5.1 MediumSeptember 30, 2026
• basercms user community basercms A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web brow… CVE-2026-93460 5.1 MediumSeptember 30, 2026
• basercms user community basercms A cross-site scripting vulnerability via script validation bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser. CVE-2026-93463 5.1 MediumSeptember 30, 2026
• baserproject basercms baserCMS < 5.3.0 SQL Injection and Code Injection via BcDatabaseService.php CVE-2026-76635 8.6 HighAugust 20, 2026
• basercms users community basercms BaserCMS provided by baserCMS Users Community contains a CSV file injection vulnerability. If a... CVE-2026-65875 5.1 MediumAugust 3, 2026
• basercms baserCMS: Multiple vulnerabilities in baserCMS CVE-2026-32734 Fix available 7.1 HighMarch 31, 2026
• basercms baserCMS: Cross-site scripting vulnerability in blog post CVE-2026-30879 Fix available 6.9 MediumMarch 31, 2026
• basercms baserCMS: Path Traversal in Theme File API Leads to Arbitrary File Write and RCE CVE-2026-30940 Fix available 7.2 HighMarch 31, 2026
• basercms baserCMS: Mail Form Acceptance Bypass via Public API CVE-2026-30878 Fix available 5.3 MediumMarch 31, 2026
• basercms baserCMS: OS Command Injection in the baserCMS Update Functionality CVE-2026-30877 Fix available 9.1 CriticalMarch 31, 2026
• basercms baserCMS: OS command injection vulnerability in installer CVE-2026-30880 Fix available 9.2 CriticalMarch 31, 2026
• basercms baserCMS: SQL injection vulnerability in blog post CVE-2026-27697 Fix available 6.9 MediumMarch 31, 2026
• basercms baserCMS: OS Command Injection Leading to Remote Code Execution (RCE) CVE-2026-21861 Fix available 9.1 CriticalMarch 31, 2026
• basercms baserCMS: unsafe File Upload Leading to Remote Code Execution (RCE) CVE-2025-32957 Fix available 8.7 HighMarch 31, 2026
• basercms baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature CVE-2024-46998 Fix available 7.1 HighOctober 24, 2024
• basercms baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature CVE-2024-46996 Fix available 6.3 MediumOctober 24, 2024
• basercms baserCMS has Cross-site Scripting Vulnerability in HTTP 400 Bad Request CVE-2024-46995 Fix available 6.1 MediumOctober 24, 2024
• basercms baserCMS has Cross-site Scripting Vulnerability in Blog posts and Contents list Feature CVE-2024-46994 Fix available 5.4 MediumOctober 24, 2024
• basercms baserCMS Cross-site Scripting vulnerability in Content Management CVE-2024-26128 Fix available 5.4 MediumFebruary 22, 2024
• basercms baserCMS OS command injection vulnerability in Installer CVE-2023-51450 Fix available 5.6 MediumFebruary 22, 2024
• basercms baserCMS Cross-site Scripting vulnerability in Site search Feature CVE-2023-44379 Fix available 6.1 MediumFebruary 22, 2024
• basercms baserCMS Code Injection Vulnerability in Mail Form Feature CVE-2023-43792 5.3 MediumOctober 26, 2023
• basercms baserCMS CSRF vulnerability in Content preview Feature CVE-2023-43649 Fix available 4.7 MediumOctober 26, 2023
• basercms baserCMS Directory Traversal vulnerability in Form submission data management Feature CVE-2023-43648 Fix available 4.9 MediumOctober 26, 2023
• basercms baserCMS Cross-site Scripting vulnerability in File upload Feature CVE-2023-43647 Fix available 6.1 MediumOctober 26, 2023
• basercms basercms XSS Vulnerability via Favorites Feature CVE-2023-29009 Fix available 6.1 MediumOctober 26, 2023
• basercms baserCMS allows any file to be uploaded CVE-2023-25655 Fix available 9.8 CriticalMarch 23, 2023
• basercms baserCMS File Uploader Remote Code Execution (RCE) vulnerability CVE-2023-25654 Fix available 9.8 CriticalMarch 23, 2023
• basercms baserCMS vulnerable to stored Cross-site Scripting CVE-2022-42486 Fix available 4.8 MediumDecember 7, 2022
• basercms baserCMS vulnerable to stored Cross-site Scripting CVE-2022-41994 Fix available 4.8 MediumDecember 7, 2022
• basercms Cross-site scripting vulnerability in BaserCMS CVE-2022-39325 Fix available 4.6 MediumNovember 25, 2022
• basercms Zip Slip Vulnerability in BaserCMS CVE-2021-41279 Fix available 7.7 HighNovember 26, 2021
• basercms OS Command Injection Vulnerability and Potential Zip Slip Vulnerability CVE-2021-41243 Fix available 9.1 CriticalNovember 26, 2021
• basercms Cross-site scripting vulnerability in file upload CVE-2021-39136 Fix available 8.7 HighAugust 25, 2021
• basercms Cross-site Scripting (XSS) in baserCMS CVE-2021-20683 Fix available 5.4 MediumMarch 26, 2021
• basercms OS Command Injection in baserCMS CVE-2021-20682 Fix available 7.2 HighMarch 26, 2021
• basercms Cross-site Scripting (XSS) in baserCMS CVE-2021-20681 Fix available 5.4 MediumMarch 26, 2021
• basercms Cross-Site Scripting in baserCMS CVE-2020-15273 Fix available 7.3 HighOctober 30, 2020
• basercms Cross Site Scripting in baserCMS CVE-2020-15276 Fix available 7.7 HighOctober 30, 2020
• basercms Remote Code Execution in baserCMS CVE-2020-15277 Fix available 7.2 HighOctober 30, 2020
• basercms Cross Site Scripting leading to RCE in baserCMS CVE-2020-15159 Fix available 7.6 HighAugust 28, 2020
• Show olderLoading…