Basercms - vulnerabilities (CVEs)

69 CVEs in 2 products, 0 in the last 30 days, newest from 2026-08-20.

Products

Basercms - 69 CVEs
Mail - 2 CVEs

Newest CVEs of Basercms

CVE-2026-76635 - CVSS 8.6 (high), 2026-08-20: baserCMS before 5.3.0 contains a SQL injection vulnerability in BcDatabaseService.php that allows authenticated administrators to inject attacker-controlled…
CVE-2026-30940 - CVSS 7.2 (high), 2026-03-31: baserCMS is a website development framework. Prior to version 5.2.3, a path traversal vulnerability exists in the theme file management API…
CVE-2026-30880 - CVSS 9.8 (critical), 2026-03-31: baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has an OS command injection vulnerability in the installer. This issue has been…
CVE-2026-30879 - CVSS 6.9 (medium), 2026-03-31: baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a cross-site scripting vulnerability in blog posts. This issue has been…
CVE-2026-32734 - CVSS 7.1 (high), 2026-03-31: baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has DOM-based cross-site scripting in tag creation. This issue has been patched…
CVE-2026-21861 - CVSS 9.1 (critical), 2026-03-31: baserCMS is a website development framework. Prior to version 5.2.3, baserCMS contains an OS command injection vulnerability in the core update functionality.…
CVE-2026-30878 - CVSS 5.3 (medium), 2026-03-31: baserCMS is a website development framework. Prior to version 5.2.3, a public mail submission API allows unauthenticated users to submit mail form entries…
CVE-2026-30877 - CVSS 9.1 (critical), 2026-03-31: baserCMS is a website development framework. Prior to version 5.2.3, there is an OS command injection vulnerability in the update functionality. Due to this…
CVE-2026-27697 - CVSS 9.8 (critical), 2026-03-31: baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a SQL injection vulnerability in blog posts. This issue has been patched in…
CVE-2025-32957 - CVSS 8.7 (high), 2026-03-31: baserCMS is a website development framework. Prior to version 5.2.3, the application's restore function allows users to upload a .zip file, which is then…
CVE-2024-46996 - CVSS 6.3 (medium), 2024-10-24: baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Blog posts feature. Version 5.1.2 fixes…
CVE-2024-46995 - CVSS 6.1 (medium), 2024-10-24: baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in HTTP 400 Bad Request. Version 5.1.2 fixes…
CVE-2024-46998 - CVSS 7.1 (high), 2024-10-24: baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Edit Email Form Settings Feature.…
CVE-2024-46994 - CVSS 5.4 (medium), 2024-10-24: baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog posts and Contents list Feature.…
CVE-2024-26128 - CVSS 5.4 (medium), 2024-02-22: baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the content management feature. Version…
CVE-2023-51450 - CVSS 8.1 (high), 2024-02-22: baserCMS is a website development framework. Prior to version 5.0.9, there is an OS Command Injection vulnerability in the site search feature of baserCMS.…
CVE-2023-44379 - CVSS 6.1 (medium), 2024-02-22: baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the site search feature. Version 5.0.9…
CVE-2023-43792 - CVSS 9.8 (critical), 2023-10-30: baserCMS is a website development framework. In versions 4.6.0 through 4.7.6, there is a Code Injection vulnerability in the mail form of baserCMS. As of time…
CVE-2023-43649 - CVSS 9.8 (critical), 2023-10-30: baserCMS is a website development framework. Prior to version 4.8.0, there is a cross site request forgery vulnerability in the content preview feature of…
CVE-2023-43648 - CVSS 6.5 (medium), 2023-10-30: baserCMS is a website development framework. Prior to version 4.8.0, there is a Directory Traversal Vulnerability in the form submission data management…
CVE-2023-43647 - CVSS 6.1 (medium), 2023-10-30: baserCMS is a website development framework. Prior to version 4.8.0, there is a cross-site scripting vulnerability in the file upload feature of baserCMS.…
CVE-2023-29009 - CVSS 6.1 (medium), 2023-10-27: baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS. This…
CVE-2023-25655 - CVSS 9.8 (critical), 2023-03-23: baserCMS is a Content Management system. Prior to version 4.7.5, any file may be uploaded on the management system of baserCMS. Version 4.7.5 contains a patch.
CVE-2023-25654 - CVSS 9.8 (critical), 2023-03-23: baserCMS is a Content Management system. Prior to version 4.7.5, there is a Remote Code Execution (RCE) Vulnerability in the management system of baserCMS.…
CVE-2022-42486 - CVSS 4.8 (medium), 2022-12-07: Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an…
CVE-2022-41994 - CVSS 4.8 (medium), 2022-12-07: Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an…
CVE-2022-39325 - CVSS 6.1 (medium), 2022-11-25: BaserCMS is a content management system with a japanese language focus. In affected versions there is a cross-site scripting vulnerability on the management…
CVE-2021-41279 - CVSS 8.8 (high), 2021-11-26: BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may upload…
CVE-2021-41243 - CVSS 9.1 (critical), 2021-11-26: There is a Potential Zip Slip Vulnerability and OS Command Injection Vulnerability on the management system of baserCMS. Users with permissions to upload…
CVE-2021-39136 - CVSS 8.7 (high), 2021-08-25: baserCMS is an open source content management system with a focus on Japanese language support. In affected versions there is a cross-site scripting…