Baserproject/basercms

This hub aggregates every CVE we track for Baserproject/basercms, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Baserproject/basercms.

• CVE-2024-46998baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature7.1Oct 24, 2024
• CVE-2024-46996baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature6.3Oct 24, 2024
• CVE-2024-46995baserCMS has Cross-site Scripting Vulnerability in HTTP 400 Bad Request6.1Oct 24, 2024
• CVE-2024-46994baserCMS has Cross-site Scripting Vulnerability in Blog posts and Contents list Feature5.4Oct 24, 2024
• CVE-2024-26128baserCMS Cross-site Scripting vulnerability in Content Management5.4Feb 22, 2024
• CVE-2023-51450baserCMS OS command injection vulnerability in Installer5.6Feb 22, 2024
• CVE-2023-44379baserCMS Cross-site Scripting vulnerability in Site search Feature6.1Feb 22, 2024
• CVE-2023-43792baserCMS Code Injection Vulnerability in Mail Form Feature9.8Oct 30, 2023
• CVE-2023-43649baserCMS CSRF vulnerability in Content preview Feature4.7Oct 30, 2023
• CVE-2023-43648baserCMS Directory Traversal vulnerability in Form submission data management Feature4.9Oct 30, 2023
• CVE-2023-43647baserCMS Cross-site Scripting vulnerability in File upload Feature6.1Oct 30, 2023
• CVE-2023-29009basercms XSS Vulnerability via Favorites Feature6.1Oct 27, 2023
• CVE-2023-25655baserCMS allows any file to be uploaded9.8Mar 23, 2023
• CVE-2023-25654baserCMS File Uploader Remote Code Execution (RCE) vulnerability9.8Mar 23, 2023
• CVE-2022-41994Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary s...4.8Dec 7, 2022