BA
Vendor
baserproject
18
CVEs
0
On KEV
8
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115457 New | BA basercms baserproject | 7.1 | Oct 23 | baserCMS: Unauthenticated Stored XSS via Shortcode Expansion in Blog Comments |
| CVE-2026-114624 New | BA basercms baserproject | 7.2 | Oct 23 | baserCMS: PHP object injection via unguarded unserialize() in the widget-area entity |
| CVE-2026-114623 New | BA basercms baserproject | 6.5 | Oct 23 | baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosure |
| CVE-2026-114622 New | BA basercms baserproject | 7.2 | Oct 23 | baserCMS: Encoded path traversal bypass in the theme file API |
| CVE-2026-114621 New | BA basercms baserproject | 8.8 | Oct 23 | baserCMS: SQL injection in the admin panel and admin API |
| CVE-2026-115480 New | BA basercms baserproject | 5.3 | Oct 23 | baserCMS: Public Web API mail-form submission bypasses image CAPTCHA |
| CVE-2026-115479 New | BA basercms baserproject | 5.3 | Oct 23 | baserCMS: Mail-form auto-replies accept multiple visitor-controlled recipients |
| CVE-2026-115481 New | BA basercms baserproject | 8.5 | Oct 23 | baserCMS: BcCustomContent file fields can be configured to allow executable file extensions such as php, leading to arbitrary PHP file upload |
| CVE-2026-76635 | BA basercms baserproject | 7.2 | Aug 20 | baserCMS < 5.3.0 SQL Injection and Code Injection via BcDatabaseService.php |
| CVE-2026-32734 | BA basercms baserproject | 6.1 | Mar 31 | baserCMS: Multiple vulnerabilities in baserCMS |
| CVE-2026-30879 | BA basercms baserproject | 6.1 | Mar 31 | baserCMS: Cross-site scripting vulnerability in blog post |
| CVE-2026-30940 | BA basercms baserproject | 7.2 | Mar 31 | baserCMS: Path Traversal in Theme File API Leads to Arbitrary File Write and RCE |
| CVE-2026-30878 | BA basercms baserproject | 5.3 | Mar 31 | baserCMS: Mail Form Acceptance Bypass via Public API |
| CVE-2026-30877 | BA basercms baserproject | 7.2 | Mar 31 | baserCMS: OS Command Injection in the baserCMS Update Functionality |
| CVE-2026-30880 | BA basercms baserproject | 9.8 | Mar 31 | baserCMS: OS command injection vulnerability in installer |
| CVE-2026-27697 | BA basercms baserproject | 9.8 | Mar 31 | baserCMS: SQL injection vulnerability in blog post |
| CVE-2026-21861 | BA basercms baserproject | 7.2 | Mar 31 | baserCMS: OS Command Injection Leading to Remote Code Execution (RCE) |
| CVE-2025-32957 | BA basercms baserproject | 7.2 | Mar 31 | baserCMS: unsafe File Upload Leading to Remote Code Execution (RCE) |