Baserproject vulnerabilities
42 CVEs and advisories name Baserproject as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-115457baserCMS: Unauthenticated Stored XSS via Shortcode Expansion in Blog Comments
- CVE-2026-114624baserCMS: PHP object injection via unguarded unserialize() in the widget-area entity
- CVE-2026-114623baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosure
- CVE-2026-114622baserCMS: Encoded path traversal bypass in the theme file API
- CVE-2026-114621baserCMS: SQL injection in the admin panel and admin API
- CVE-2026-115480baserCMS: Public Web API mail-form submission bypasses image CAPTCHA
- CVE-2026-115479baserCMS: Mail-form auto-replies accept multiple visitor-controlled recipients
- CVE-2026-115481baserCMS: BcCustomContent file fields can be configured to allow executable file extensions such as php, leading to arbitrary PHP file upload
- CVE-2026-76635baserCMS < 5.3.0 SQL Injection and Code Injection via BcDatabaseService.php
- CVE-2026-32734baserCMS: Multiple vulnerabilities in baserCMS
- CVE-2026-30879baserCMS: Cross-site scripting vulnerability in blog post
- CVE-2026-30940baserCMS: Path Traversal in Theme File API Leads to Arbitrary File Write and RCE
- CVE-2026-30878baserCMS: Mail Form Acceptance Bypass via Public API
- CVE-2026-30877baserCMS: OS Command Injection in the baserCMS Update Functionality
- CVE-2026-30880baserCMS: OS command injection vulnerability in installer
- CVE-2026-27697baserCMS: SQL injection vulnerability in blog post
- CVE-2026-21861baserCMS: OS Command Injection Leading to Remote Code Execution (RCE)
- CVE-2025-32957baserCMS: unsafe File Upload Leading to Remote Code Execution (RCE)
- CVE-2024-46998baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature
- CVE-2024-46996baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature
- CVE-2024-46995baserCMS has Cross-site Scripting Vulnerability in HTTP 400 Bad Request
- CVE-2024-46994baserCMS has Cross-site Scripting Vulnerability in Blog posts and Contents list Feature
- CVE-2024-26128baserCMS Cross-site Scripting vulnerability in Content Management
- CVE-2023-51450baserCMS OS command injection vulnerability in Installer
- CVE-2023-44379baserCMS Cross-site Scripting vulnerability in Site search Feature
- CVE-2023-43792baserCMS Code Injection Vulnerability in Mail Form Feature
- CVE-2023-43649baserCMS CSRF vulnerability in Content preview Feature
- CVE-2023-43648baserCMS Directory Traversal vulnerability in Form submission data management Feature
- CVE-2023-43647baserCMS Cross-site Scripting vulnerability in File upload Feature
- CVE-2023-29009basercms XSS Vulnerability via Favorites Feature