Bbaserproject

Products

Exploited and recent CVEs

• CVE-2026-115457 High 7.1 baserCMS: Unauthenticated Stored XSS via Shortcode Expansion in Blog Comments 0.4%
• CVE-2026-114624 High 7.2 baserCMS: PHP object injection via unguarded unserialize() in the widget-area entity 0.9%
• CVE-2026-114623 Medium 6.5 baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosure 0.7%
• CVE-2026-114622 High 7.2 baserCMS: Encoded path traversal bypass in the theme file API 0.6%
• CVE-2026-114621 High 8.8 baserCMS: SQL injection in the admin panel and admin API 0.4%
• CVE-2026-115480 Medium 5.3 baserCMS: Public Web API mail-form submission bypasses image CAPTCHA 0.3%
• CVE-2026-115479 Medium 5.3 baserCMS: Mail-form auto-replies accept multiple visitor-controlled recipients 0.3%
• CVE-2026-115481 High 8.5 baserCMS: BcCustomContent file fields can be configured to allow executable file extensions such as php, leading to arbitrary PHP file upload 0.4%
• CVE-2026-76635 High 7.2 baserCMS < 5.3.0 SQL Injection and Code Injection via BcDatabaseService.php 0.4%
• CVE-2026-32734 High 7.1 baserCMS: Multiple vulnerabilities in baserCMS 0.3%
• CVE-2026-30879 Medium 6.9 baserCMS: Cross-site scripting vulnerability in blog post 0.2%
• CVE-2026-30940 High 7.2 baserCMS: Path Traversal in Theme File API Leads to Arbitrary File Write and RCE 1.1%
• CVE-2026-30878 Medium 5.3 baserCMS: Mail Form Acceptance Bypass via Public API 0.4%
• CVE-2026-30877 Critical 9.1 baserCMS: OS Command Injection in the baserCMS Update Functionality 1.5%
• CVE-2026-30880 Critical 9.2 baserCMS: OS command injection vulnerability in installer 2.1%
• CVE-2026-27697 Medium 6.9 baserCMS: SQL injection vulnerability in blog post 0.4%
• CVE-2026-21861 Critical 9.1 baserCMS: OS Command Injection Leading to Remote Code Execution (RCE) 2.3%
• CVE-2025-32957 High 8.7 baserCMS: unsafe File Upload Leading to Remote Code Execution (RCE) 0.6%
• CVE-2024-46998 High 7.1 baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature 0.4%
• CVE-2024-46996 Medium 6.3 baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature 0.3%
• CVE-2024-46995 Medium 6.1 baserCMS has Cross-site Scripting Vulnerability in HTTP 400 Bad Request 0.3%
• CVE-2024-46994 Medium 5.4 baserCMS has Cross-site Scripting Vulnerability in Blog posts and Contents list Feature 0.3%
• CVE-2024-26128 Medium 5.4 baserCMS Cross-site Scripting vulnerability in Content Management 0.6%
• CVE-2023-51450 Medium 5.6 baserCMS OS command injection vulnerability in Installer 1.5%
• CVE-2023-44379 Medium 6.1 baserCMS Cross-site Scripting vulnerability in Site search Feature 0.5%
• CVE-2023-43792 Medium 5.3 baserCMS Code Injection Vulnerability in Mail Form Feature 0.7%
• CVE-2023-43649 Medium 4.7 baserCMS CSRF vulnerability in Content preview Feature 0.4%
• CVE-2023-43648 Medium 4.9 baserCMS Directory Traversal vulnerability in Form submission data management Feature 1.2%
• CVE-2023-43647 Medium 6.1 baserCMS Cross-site Scripting vulnerability in File upload Feature 0.6%
• CVE-2023-29009 Medium 6.1 basercms XSS Vulnerability via Favorites Feature 0.6%