Vulnerability index

Browse CVEs

62 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Basercms CRITICAL 9.8
CVE-2026-30880

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has an OS command injection vulnerability in the installer. This issue …

Fix: 5.2.3+
Fix from $2,300 2026-03-31
Basercms HIGH 7.2
CVE-2026-30940

baserCMS is a website development framework. Prior to version 5.2.3, a path traversal vulnerability exists in the theme file management API (/baser/a…

Fix: 5.2.3+
Fix from $1,950 2026-03-31
Basercms MEDIUM 6.1
CVE-2026-30879

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a cross-site scripting vulnerability in blog posts. This issue has …

Fix: 5.2.3+
Fix from $1,600 2026-03-31
Basercms MEDIUM 6.1
CVE-2026-32734

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has DOM-based cross-site scripting in tag creation. This issue has been…

Fix: 5.2.3+
Fix from $1,600 2026-03-31
Basercms CRITICAL 9.8
CVE-2026-27697

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a SQL injection vulnerability in blog posts. This issue has been pa…

Fix: 5.2.3+
Fix from $2,300 2026-03-31
Basercms HIGH 7.2
CVE-2026-21861

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS contains an OS command injection vulnerability in the core update funct…

Fix: 5.2.3+
Fix from $1,950 2026-03-31
Basercms HIGH 7.2
CVE-2026-30877

baserCMS is a website development framework. Prior to version 5.2.3, there is an OS command injection vulnerability in the update functionality. Due …

Fix: 5.2.3+
Fix from $1,950 2026-03-31
Basercms MEDIUM 5.3
CVE-2026-30878

baserCMS is a website development framework. Prior to version 5.2.3, a public mail submission API allows unauthenticated users to submit mail form en…

Fix: 5.2.3+
Fix from $1,600 2026-03-31
Basercms HIGH 7.2
CVE-2025-32957

baserCMS is a website development framework. Prior to version 5.2.3, the application's restore function allows users to upload a .zip file, which is …

Fix: 5.2.3+
Fix from $1,950 2026-03-31
Basercms MEDIUM 6.1
CVE-2024-46995

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in HTTP 400 Bad Request. Version 5.1.2…

Fix: 5.1.2+
Fix from $1,600 2024-10-24
Basercms MEDIUM 5.4
CVE-2024-46996

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Blog posts feature. Version 5.1…

Fix: 5.1.2+
Fix from $1,600 2024-10-24
Basercms MEDIUM 5.4
CVE-2024-46998

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Edit Email Form Settings Featur…

Fix: 5.1.2+
Fix from $1,600 2024-10-24
Basercms MEDIUM 5.4
CVE-2024-46994

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog posts and Contents list Featur…

Fix: 5.1.2+
Fix from $1,600 2024-10-24
Basercms MEDIUM 5.4
CVE-2024-26128

baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the content management feature.…

Fix: 5.0.9+
Fix from $1,600 2024-02-22
Basercms HIGH 8.1
CVE-2023-51450

baserCMS is a website development framework. Prior to version 5.0.9, there is an OS Command Injection vulnerability in the site search feature of bas…

Fix: 5.0.9+
Fix from $1,950 2024-02-22
Basercms MEDIUM 6.1
CVE-2023-44379

baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the site search feature. Versio…

Fix: 5.0.9+
Fix from $1,600 2024-02-22
Basercms CRITICAL 9.8
CVE-2023-43792

baserCMS is a website development framework. In versions 4.6.0 through 4.7.6, there is a Code Injection vulnerability in the mail form of baserCMS. A…

Fix: after 4.7.6
Fix from $2,300 2023-10-30
Basercms CRITICAL 9.8
CVE-2023-43649

baserCMS is a website development framework. Prior to version 4.8.0, there is a cross site request forgery vulnerability in the content preview featu…

Fix: 4.8.0+
Fix from $2,300 2023-10-30
Basercms MEDIUM 6.5
CVE-2023-43648

baserCMS is a website development framework. Prior to version 4.8.0, there is a Directory Traversal Vulnerability in the form submission data managem…

Fix: 4.8.0+
Fix from $1,600 2023-10-30
Basercms MEDIUM 5.4
CVE-2023-43647

baserCMS is a website development framework. Prior to version 4.8.0, there is a cross-site scripting vulnerability in the file upload feature of base…

Fix: 4.8.0+
Fix from $1,600 2023-10-30
Basercms MEDIUM 6.1
CVE-2023-29009

baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS…

Fix: 4.8.0+
Fix from $1,600 2023-10-27
Basercms CRITICAL 9.8
CVE-2023-25655

baserCMS is a Content Management system. Prior to version 4.7.5, any file may be uploaded on the management system of baserCMS. Version 4.7.5 contain…

Fix: 4.7.5+
Fix from $2,300 2023-03-23
Basercms CRITICAL 9.8
CVE-2023-25654

baserCMS is a Content Management system. Prior to version 4.7.5, there is a Remote Code Execution (RCE) Vulnerability in the management system of bas…

Fix: 4.7.5+
Fix from $2,300 2023-03-23
Basercms MEDIUM 6.1
CVE-2022-39325

BaserCMS is a content management system with a japanese language focus. In affected versions there is a cross-site scripting vulnerability on the man…

Fix: 4.7.2+
Fix from $1,600 2022-11-25
Basercms HIGH 8.8
CVE-2021-41243

There is a Potential Zip Slip Vulnerability and OS Command Injection Vulnerability on the management system of baserCMS. Users with permissions to up…

Fix: 4.5.4+
Fix from $1,950 2021-11-26
Basercms HIGH 8.8
CVE-2021-41279

BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may …

Fix: 4.5.4+
Fix from $1,950 2021-11-26
Basercms MEDIUM 5.4
CVE-2021-39136

baserCMS is an open source content management system with a focus on Japanese language support. In affected versions there is a cross-site scripting …

Fix: 4.5.1+
Fix from $1,600 2021-08-25
Basercms HIGH 7.2
CVE-2021-20682

baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors.

Fix: 4.4.5+
Fix from $1,950 2021-03-26
Basercms MEDIUM 5.4
CVE-2021-20681

Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to…

Fix: 4.4.5+
Fix from $1,600 2021-03-26
Basercms MEDIUM 5.4
CVE-2021-20683

Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated atta…

Fix: 4.4.5+
Fix from $1,600 2021-03-26