basercms Vulnerability Advisory Catalog

Total 68 security vulnerabilities recorded for basercms software and firmware.

← Back to All Vendors
Component: basercms

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has DOM-based cross-site scripting in tag creation. This issue has been ...

📅 2026-03-31
CVSS 7.1 Dossier →
Component: basercms

baserCMS is a website development framework. Prior to version 5.2.3, a path traversal vulnerability exists in the theme file management API (/baser/ap...

📅 2026-03-31
CVSS 7.2 Dossier →
CVE-2026-30880 CRITICAL
Component: basercms

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has an OS command injection vulnerability in the installer. This issue h...

📅 2026-03-31
CVSS 9.8 Dossier →
Component: basercms

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a cross-site scripting vulnerability in blog posts. This issue has b...

📅 2026-03-31
CVSS 6.1 Dossier →
Component: basercms

baserCMS is a website development framework. Prior to version 5.2.3, a public mail submission API allows unauthenticated users to submit mail form ent...

📅 2026-03-31
CVSS 5.3 Dossier →
CVE-2026-30877 CRITICAL
Component: basercms

baserCMS is a website development framework. Prior to version 5.2.3, there is an OS command injection vulnerability in the update functionality. Due t...

📅 2026-03-31
CVSS 9.1 Dossier →
CVE-2026-27697 CRITICAL
Component: basercms

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a SQL injection vulnerability in blog posts. This issue has been pat...

📅 2026-03-31
CVSS 9.8 Dossier →
CVE-2026-21861 CRITICAL
Component: basercms

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS contains an OS command injection vulnerability in the core update functi...

📅 2026-03-31
CVSS 9.1 Dossier →
Component: basercms

baserCMS is a website development framework. Prior to version 5.2.3, the application's restore function allows users to upload a .zip file, which is t...

📅 2026-03-31
CVSS 8.7 Dossier →
Component: basercms

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Edit Email Form Settings Feature...

📅 2024-10-24
CVSS 7.1 Dossier →
Component: basercms

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Blog posts feature. Version 5.1....

📅 2024-10-24
CVSS 6.3 Dossier →
Component: basercms

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in HTTP 400 Bad Request. Version 5.1.2 ...

📅 2024-10-24
CVSS 6.1 Dossier →
Component: basercms

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog posts and Contents list Feature...

📅 2024-10-24
CVSS 5.4 Dossier →
Component: basercms

baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the content management feature. ...

📅 2024-02-22
CVSS 5.4 Dossier →
Component: basercms

baserCMS is a website development framework. Prior to version 5.0.9, there is an OS Command Injection vulnerability in the site search feature of base...

📅 2024-02-22
CVSS 5.6 Dossier →
Component: basercms

baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the site search feature. Version...

📅 2024-02-22
CVSS 6.1 Dossier →
CVE-2023-43792 CRITICAL
Component: basercms

baserCMS is a website development framework. In versions 4.6.0 through 4.7.6, there is a Code Injection vulnerability in the mail form of baserCMS. As...

📅 2023-10-30
CVSS 9.8 Dossier →
Component: basercms

baserCMS is a website development framework. Prior to version 4.8.0, there is a cross site request forgery vulnerability in the content preview featur...

📅 2023-10-30
CVSS 4.7 Dossier →
Component: basercms

baserCMS is a website development framework. Prior to version 4.8.0, there is a Directory Traversal Vulnerability in the form submission data manageme...

📅 2023-10-30
CVSS 4.9 Dossier →
Component: basercms

baserCMS is a website development framework. Prior to version 4.8.0, there is a cross-site scripting vulnerability in the file upload feature of baser...

📅 2023-10-30
CVSS 6.1 Dossier →
Component: basercms

baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS....

📅 2023-10-27
CVSS 6.1 Dossier →
CVE-2023-25655 CRITICAL
Component: basercms

baserCMS is a Content Management system. Prior to version 4.7.5, any file may be uploaded on the management system of baserCMS. Version 4.7.5 contains...

📅 2023-03-23
CVSS 9.8 Dossier →
CVE-2023-25654 CRITICAL
Component: basercms

baserCMS is a Content Management system. Prior to version 4.7.5, there is a Remote Code Execution (RCE) Vulnerability in the management system of base...

📅 2023-03-23
CVSS 9.8 Dossier →
Component: basercms

Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an ...

📅 2022-12-07
CVSS 4.8 Dossier →
Page 1 of 3 (68 Total Records)