Browse CVEs

CRITICAL 9.8 CVE-2026-30880 baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has an OS command injection vulnerability in the installer. This issue … Basercms 5.2.3+ Fix from $2,3002026-03-31 HIGH 7.2 CVE-2026-30940 baserCMS is a website development framework. Prior to version 5.2.3, a path traversal vulnerability exists in the theme file management API (/baser/a… Basercms 5.2.3+ Fix from $1,9502026-03-31 MEDIUM 6.1 CVE-2026-30879 baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a cross-site scripting vulnerability in blog posts. This issue has … Basercms 5.2.3+ Fix from $1,6002026-03-31 MEDIUM 6.1 CVE-2026-32734 baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has DOM-based cross-site scripting in tag creation. This issue has been… Basercms 5.2.3+ Fix from $1,6002026-03-31 CRITICAL 9.8 CVE-2026-27697 baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a SQL injection vulnerability in blog posts. This issue has been pa… Basercms 5.2.3+ Fix from $2,3002026-03-31 HIGH 7.2 CVE-2026-21861 baserCMS is a website development framework. Prior to version 5.2.3, baserCMS contains an OS command injection vulnerability in the core update funct… Basercms 5.2.3+ Fix from $1,9502026-03-31 HIGH 7.2 CVE-2026-30877 baserCMS is a website development framework. Prior to version 5.2.3, there is an OS command injection vulnerability in the update functionality. Due … Basercms 5.2.3+ Fix from $1,9502026-03-31 MEDIUM 5.3 CVE-2026-30878 baserCMS is a website development framework. Prior to version 5.2.3, a public mail submission API allows unauthenticated users to submit mail form en… Basercms 5.2.3+ Fix from $1,6002026-03-31 HIGH 7.2 CVE-2025-32957 baserCMS is a website development framework. Prior to version 5.2.3, the application's restore function allows users to upload a .zip file, which is … Basercms 5.2.3+ Fix from $1,9502026-03-31 MEDIUM 6.1 CVE-2024-46995 baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in HTTP 400 Bad Request. Version 5.1.2… Basercms 5.1.2+ Fix from $1,6002024-10-24 MEDIUM 5.4 CVE-2024-46996 baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Blog posts feature. Version 5.1… Basercms 5.1.2+ Fix from $1,6002024-10-24 MEDIUM 5.4 CVE-2024-46998 baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Edit Email Form Settings Featur… Basercms 5.1.2+ Fix from $1,6002024-10-24 MEDIUM 5.4 CVE-2024-46994 baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog posts and Contents list Featur… Basercms 5.1.2+ Fix from $1,6002024-10-24 MEDIUM 5.4 CVE-2024-26128 baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the content management feature.… Basercms 5.0.9+ Fix from $1,6002024-02-22 HIGH 8.1 CVE-2023-51450 baserCMS is a website development framework. Prior to version 5.0.9, there is an OS Command Injection vulnerability in the site search feature of bas… Basercms 5.0.9+ Fix from $1,9502024-02-22 MEDIUM 6.1 CVE-2023-44379 baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the site search feature. Versio… Basercms 5.0.9+ Fix from $1,6002024-02-22 CRITICAL 9.8 CVE-2023-43792 baserCMS is a website development framework. In versions 4.6.0 through 4.7.6, there is a Code Injection vulnerability in the mail form of baserCMS. A… Basercms after 4.7.6 Fix from $2,3002023-10-30 CRITICAL 9.8 CVE-2023-43649 baserCMS is a website development framework. Prior to version 4.8.0, there is a cross site request forgery vulnerability in the content preview featu… Basercms 4.8.0+ Fix from $2,3002023-10-30 MEDIUM 6.5 CVE-2023-43648 baserCMS is a website development framework. Prior to version 4.8.0, there is a Directory Traversal Vulnerability in the form submission data managem… Basercms 4.8.0+ Fix from $1,6002023-10-30 MEDIUM 5.4 CVE-2023-43647 baserCMS is a website development framework. Prior to version 4.8.0, there is a cross-site scripting vulnerability in the file upload feature of base… Basercms 4.8.0+ Fix from $1,6002023-10-30 MEDIUM 6.1 CVE-2023-29009 baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS… Basercms 4.8.0+ Fix from $1,6002023-10-27 CRITICAL 9.8 CVE-2023-25655 baserCMS is a Content Management system. Prior to version 4.7.5, any file may be uploaded on the management system of baserCMS. Version 4.7.5 contain… Basercms 4.7.5+ Fix from $2,3002023-03-23 CRITICAL 9.8 CVE-2023-25654 baserCMS is a Content Management system. Prior to version 4.7.5, there is a Remote Code Execution (RCE) Vulnerability in the management system of bas… Basercms 4.7.5+ Fix from $2,3002023-03-23 MEDIUM 6.1 CVE-2022-39325 BaserCMS is a content management system with a japanese language focus. In affected versions there is a cross-site scripting vulnerability on the man… Basercms 4.7.2+ Fix from $1,6002022-11-25 HIGH 8.8 CVE-2021-41243 There is a Potential Zip Slip Vulnerability and OS Command Injection Vulnerability on the management system of baserCMS. Users with permissions to up… Basercms 4.5.4+ Fix from $1,9502021-11-26 HIGH 8.8 CVE-2021-41279 BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may … Basercms 4.5.4+ Fix from $1,9502021-11-26 MEDIUM 5.4 CVE-2021-39136 baserCMS is an open source content management system with a focus on Japanese language support. In affected versions there is a cross-site scripting … Basercms 4.5.1+ Fix from $1,6002021-08-25 HIGH 7.2 CVE-2021-20682 baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors. Basercms 4.4.5+ Fix from $1,9502021-03-26 MEDIUM 5.4 CVE-2021-20681 Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to… Basercms 4.4.5+ Fix from $1,6002021-03-26 MEDIUM 5.4 CVE-2021-20683 Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated atta… Basercms 4.4.5+ Fix from $1,6002021-03-26