BA
Product
basercms
18
CVEs
0
On KEV
9.8
Max CVSS
8
New 30D
Severity mix
Critical 2High 10Medium 10Low 0
Watch
Add basercms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-114623 New | 6.5 | Oct 23 | baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosure Affected: >= 5.0.0, < 5.3.2; >= 5.4.0, < 5.4.2 |
| CVE-2026-32734 | 6.1 | Mar 31 | baserCMS: Multiple vulnerabilities in baserCMS Affected: < 5.2.3 |
| CVE-2026-30879 | 6.1 | Mar 31 | baserCMS: Cross-site scripting vulnerability in blog post Affected: < 5.2.3 |
| CVE-2024-46995 | 6.1 | Oct 24 | baserCMS has Cross-site Scripting Vulnerability in HTTP 400 Bad Request Affected: < 5.1.2 |
| CVE-2024-46998 | 5.4 | Oct 24 | baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature Affected: < 5.1.2 |
| CVE-2024-46996 | 5.4 | Oct 24 | baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature Affected: < 5.1.2 |
| CVE-2024-46994 | 5.4 | Oct 24 | baserCMS has Cross-site Scripting Vulnerability in Blog posts and Contents list Feature Affected: < 5.1.2 |
| CVE-2026-115480 New | 5.3 | Oct 23 | baserCMS: Public Web API mail-form submission bypasses image CAPTCHA Affected: >= 5.0.0, < 5.3.2; >= 5.4.0, < 5.4.2 |
| CVE-2026-115479 New | 5.3 | Oct 23 | baserCMS: Mail-form auto-replies accept multiple visitor-controlled recipients Affected: >= 5.2.5, < 5.3.2; >= 5.4.0, < 5.4.2 |
| CVE-2026-30878 | 5.3 | Mar 31 | baserCMS: Mail Form Acceptance Bypass via Public API Affected: < 5.2.3 |
Showing 10