MEDIUM5.4Packagist
GHSA-24p5-x9f9-vvpx· CVE-2021-20681Cross-site Scripting (XSS) in baserCMS
Modified: 9/10/2026
package
Packagist/baserproject/basercms
pkg:packagist/baserproject/basercms
MEDIUM5.3Packagist
GHSA-33fq-qm4m-cjw3· CVE-2018-0573baserCMS Access Control Bypass
Modified: 9/10/2026
MEDIUM4.6Packagist
GHSA-395x-wv32-44v5· CVE-2022-39325baserproject/basercms vulnerable to cross-site scripting (XSS) vulnerability
Modified: 9/10/2026
HIGH8.8Packagist
GHSA-397g-4jpj-44xg· CVE-2016-4879CSRF in baserCMS 3.0.10 and earlier
Modified: 9/10/2026
MEDIUM4.3Packagist
GHSA-3mcp-6rv6-c69g· CVE-2018-0571baserCMS arbitrary file upload vulnerability
Modified: 9/10/2026
HIGH8.8Packagist
GHSA-46vm-rwrf-jrxm· CVE-2016-4881CSRF in baserCMS 3.0.10 and earlier
Modified: 9/10/2026
HIGH7.3Packagist
GHSA-4r3m-j6x5-48m3· CVE-2020-15155Cross Site Scripting(XSS) Vulnerability in Latest Release 4.3.6 Site basic settings
Modified: 9/10/2026
HIGH7.7Packagist
GHSA-4x2f-54wr-4hjg· CVE-2021-41279Potential Zip Slip Vulnerability in baserCMS
Modified: 9/10/2026
MEDIUM6.1Packagist
GHSA-66c2-p8rh-qx87· CVE-2023-44379baserCMS Cross-site Scripting vulnerability in Site search Feature
Modified: 9/10/2026
MEDIUM6.3Packagist
GHSA-66jv-qrm3-vvfg· CVE-2024-46996baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature
Modified: 9/10/2026
HIGH7.6Packagist
GHSA-673x-f5wx-fxpw· CVE-2020-15159Cross Site Scripting and RCE in baserCMS
Modified: 9/10/2026
HIGH7.1Packagist
GHSA-677c-xv24-crgx· CVE-2026-32734baserCMS is Vulnerable to Cross-site Scripting
Modified: 9/10/2026
HIGH8.8Packagist
GHSA-69gw-v5ph-6vxq· CVE-2017-10844Code Injection in baserCMS
Modified: 9/10/2026
HIGH7.2Packagist
GHSA-6fmv-q269-55cw· CVE-2020-15277Edit template, Remote Code Execution (RCE) Vulnerability in Latest Release 4.4.0
Modified: 7/8/2026
CRITICALPackagist
GHSA-6hpg-8rx3-cwgv· CVE-2026-30880baserCMS has OS command injection vulnerability in installer
Modified: 9/10/2026
HIGH8.8Packagist
GHSA-6j3p-vrph-j7qq· CVE-2018-0569OS Command Injection in baserCMS
Modified: 9/10/2026
MEDIUM6.1Packagist
GHSA-6qjv-43mf-rgrh· CVE-2018-0574XSS in baserCMS
Modified: 9/10/2026
MEDIUMPackagist
GHSA-6wr6-54mw-mvhr· CVE-2011-2674BaserCMS privilege escallation
Modified: 9/10/2026
MEDIUM5.6Packagist
GHSA-77fc-4cv5-hmfr· CVE-2023-51450baserCMS OS command injection vulnerability in Installer
Modified: 9/10/2026
CRITICAL9.1Packagist
GHSA-7rpc-9m88-cf9w· CVE-2021-41243OS Command Injection Vulnerability and Potential Zip Slip Vulnerability in baserCMS
Modified: 9/10/2026
MEDIUM4.8Packagist
GHSA-7w2v-35j3-xrm9· CVE-2022-42486baserCMS vulnerable to stored Cross-site Scripting
Modified: 9/10/2026
MEDIUM5.3Packagist
GHSA-8cr7-r8qw-gp3c· CVE-2026-30878baserCMS has Mail Form Acceptance Bypass via Public API
Modified: 9/10/2026
MEDIUM6.1Packagist
GHSA-8vqx-prq4-rqrq· CVE-2023-29009baserCMS Cross-site Scripting Vulnerability in Favorites Feature
Modified: 9/10/2026
MEDIUM5.4Packagist
GHSA-994g-74gq-5qpr· CVE-2018-0570XSS in baserCMS
Modified: 9/10/2026
HIGH7.2Packagist
GHSA-c5c6-37vq-pjcq· CVE-2026-30940baserCMS Path Traversal Leads to Arbitrary File Write and RCE via Theme File API
Modified: 9/10/2026
HIGH7.3Packagist
GHSA-cpxc-67rc-c775· CVE-2020-15154Cross Site Scripting in baserCMS
Modified: 9/10/2026
HIGH8.8Packagist
GHSA-fg52-rc36-jp43· CVE-2016-4878baserCMS Cross Site Request Forgery vulnerability
Modified: 9/10/2026
HIGH7.7Packagist
GHSA-fw5q-j9p4-3vxg· CVE-2020-15276Blog comment posting, Cross Site Scripting(XSS) Vulnerability in Latest Release 4.4.0
Modified: 7/8/2026
MEDIUM4.7Packagist
GHSA-fw9x-cqjq-7jx5· CVE-2023-43649baserCMS CSRF vulnerability in Content preview Feature
Modified: 9/10/2026
MEDIUM4.8Packagist
GHSA-fx2m-5m9v-jhgp· CVE-2018-18943XSS in baserCMS before 4.1.4
Modified: 9/10/2026
HIGH7.2Packagist
GHSA-g39q-f4rm-85x4· CVE-2021-20682OS Command Injection in baserCMS
Modified: 9/10/2026
MEDIUM6.1Packagist
GHSA-ggj4-78rm-6xgv· CVE-2023-43647baserCMS Cross-site Scripting vulnerability in File upload Feature
Modified: 9/10/2026
CRITICAL9.8Packagist
GHSA-h4cc-fxpp-pgw9· CVE-2023-25654baserCMS File Uploader Remote Code Execution (RCE) vulnerability
Modified: 9/10/2026
HIGH8.7Packagist
GHSA-hgjr-632x-qpp3· CVE-2021-39136Cross-site scripting vulnerability in file upload
Modified: 9/10/2026
MEDIUM4.9Packagist
GHSA-hmqj-gv2m-hq55· CVE-2023-43648baserCMS Directory Traversal vulnerability in Form submission data management Feature
Modified: 9/10/2026
HIGH8.7Packagist
GHSA-hv78-cwp4-8r7r· CVE-2025-32957baserCMS has Unsafe File Upload Leading to Remote Code Execution (RCE)
Modified: 9/10/2026
CRITICAL9.8Packagist
GHSA-jc94-wp59-pq4f· CVE-2017-10842baserCMS SQL Injection vulnerability
Modified: 9/10/2026
MEDIUM5.4Packagist
GHSA-jjxq-m8h3-4vw5· CVE-2024-26128baserCMS Cross-site Scripting vulnerability in Content Management
Modified: 9/10/2026
MEDIUMPackagist
GHSA-jmq3-x8q7-j9qm· CVE-2026-30879baserCMS has a cross-site scripting vulnerability in blog posts
Modified: 9/10/2026
CRITICAL9.1Packagist
GHSA-m9g7-rgfc-jcm7· CVE-2026-30877baserCMS Update Functionality Vulnerable to OS Command Injection
Modified: 9/10/2026
CRITICAL9.8Packagist
GHSA-mfvg-qwcw-qvc8· CVE-2023-25655baserCMS allows any file to be uploaded
Modified: 9/10/2026
HIGH8.1Packagist
GHSA-mjj9-33j8-pfwh· CVE-2018-0572baserCMS vulnerable to Access Control Bypass
Modified: 9/10/2026
MEDIUM6.1Packagist
GHSA-mr7q-fv7j-jcgv· CVE-2024-46995baserCMS has a Cross-site Scripting (XSS) Vulnerability in HTTP 400 Bad Request
Modified: 9/10/2026
MEDIUM5.4Packagist
GHSA-mxfv-c8p8-qw5h· CVE-2016-4880baserCMS Cross-site Scripting vulnerability
Modified: 9/10/2026
HIGH7.1Packagist
GHSA-p3m2-mj3j-j49x· CVE-2024-46998baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature
Modified: 9/10/2026
CRITICAL9.1Packagist
GHSA-qxmc-6f24-g86g· CVE-2026-21861baserCMS has OS Command Injection Leading to Remote Code Execution (RCE)
Modified: 9/10/2026
HIGH7.2Packagist
GHSA-rjc2-x53r-6c9r· CVE-2018-18942RCE in baserCMS before 4.1.4
Modified: 9/10/2026
MEDIUMPackagist
GHSA-v9gf-98vr-mgp2· CVE-2015-5640baserCMS Access Control Bypass
Modified: 9/10/2026
MEDIUM5.4Packagist
GHSA-v9w8-hq92-v39m· CVE-2021-20683Cross-site Scripting (XSS) in baserCMS
Modified: 9/10/2026
MEDIUMPackagist
GHSA-vh89-rjph-2g7p· CVE-2026-27697baserCMS has an SQL injection vulnerability in its blog post functionality
Modified: 9/10/2026
MEDIUM5.3Packagist
GHSA-vrm6-c878-fpq6· CVE-2023-43792baserCMS Code Injection Vulnerability in Mail Form Feature
Modified: 9/10/2026
MEDIUM4.8Packagist
GHSA-vxwf-79ch-f7f7· CVE-2022-41994baserCMS vulnerable to stored Cross-site Scripting
Modified: 9/10/2026
MEDIUM5.3Packagist
GHSA-w935-p7mg-xc96· CVE-2018-0575Sensitive Data Exposure in baserCMS
Modified: 9/10/2026
HIGH7.3Packagist
GHSA-wpww-4jf4-4hx8· CVE-2020-15273Edit feed settings and others, Cross Site Scripting(XSS) Vulnerability in Latest Release 4.4.0
Modified: 7/8/2026
MEDIUM5.4Packagist
GHSA-wrjc-fmfq-w3jr· CVE-2024-46994baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts and Contents list Feature
Modified: 9/10/2026
HIGH7.5Packagist
GHSA-x73x-7gmx-w835· CVE-2017-10843Arbitrary file delete in baserCMS
Modified: 9/10/2026