Vulnerabilities in baserproject
42 resultsCVE-2022-39325MEDIUMCross-site scripting vulnerability in BaserCMSEPSS 0.6%CVE-2023-43647MEDIUMbaserCMS Cross-site Scripting vulnerability in File upload FeatureEPSS 0.6%CVE-2026-114622HIGHbaserCMS: Encoded path traversal bypass in the theme file APIEPSS 0.6%CVE-2025-32957HIGHbaserCMS: unsafe File Upload Leading to Remote Code Execution (RCE)EPSS 0.6%CVE-2024-26128MEDIUMbaserCMS Cross-site Scripting vulnerability in Content ManagementEPSS 0.6%CVE-2023-29009MEDIUMbasercms XSS Vulnerability via Favorites FeatureEPSS 0.6%CVE-2023-44379MEDIUMbaserCMS Cross-site Scripting vulnerability in Site search FeatureEPSS 0.5%CVE-2026-76635HIGHbaserCMS < 5.3.0 SQL Injection and Code Injection via BcDatabaseService.phpEPSS 0.4%CVE-2026-27697MEDIUMbaserCMS: SQL injection vulnerability in blog postEPSS 0.4%CVE-2023-43649MEDIUMbaserCMS CSRF vulnerability in Content preview FeatureEPSS 0.4%CVE-2026-115457HIGHbaserCMS: Unauthenticated Stored XSS via Shortcode Expansion in Blog CommentsEPSS 0.4%CVE-2026-115481HIGHbaserCMS: BcCustomContent file fields can be configured to allow executable file extensions such as php, leading to arbitrary PHP file uploadEPSS 0.4%CVE-2026-30878MEDIUMbaserCMS: Mail Form Acceptance Bypass via Public APIEPSS 0.4%CVE-2024-46998HIGHbaserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings FeatureEPSS 0.4%CVE-2026-114621HIGHbaserCMS: SQL injection in the admin panel and admin APIEPSS 0.4%CVE-2024-46995MEDIUMbaserCMS has Cross-site Scripting Vulnerability in HTTP 400 Bad RequestEPSS 0.3%CVE-2024-46996MEDIUMbaserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts FeatureEPSS 0.3%CVE-2026-115480MEDIUMbaserCMS: Public Web API mail-form submission bypasses image CAPTCHAEPSS 0.3%CVE-2024-46994MEDIUMbaserCMS has Cross-site Scripting Vulnerability in Blog posts and Contents list FeatureEPSS 0.3%CVE-2026-115479MEDIUMbaserCMS: Mail-form auto-replies accept multiple visitor-controlled recipientsEPSS 0.3%