basercms vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

BA

Product

basercms

by baserproject · last CVE Oct 23, 2026

30

CVEs

0

On KEV

9.8

Max CVSS

8

New 30D

Vulnerabilities30 In the news0 Timeline

Severity mix

Critical 4High 11Medium 15Low 0

Severity

All severities30 Critical4 High11 Medium15 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add basercms to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-114623 New	6.5	1%	Oct 23	baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosure Affected: >= 5.0.0, < 5.3.2; >= 5.4.0, < 5.4.2
CVE-2023-43648	6.5	1%	Oct 30	baserCMS Directory Traversal vulnerability in Form submission data management Feature Affected: < 4.8.0
CVE-2026-32734	6.1	0%	Mar 31	baserCMS: Multiple vulnerabilities in baserCMS Affected: < 5.2.3
CVE-2026-30879	6.1	0%	Mar 31	baserCMS: Cross-site scripting vulnerability in blog post Affected: < 5.2.3
CVE-2024-46995	6.1	0%	Oct 24	baserCMS has Cross-site Scripting Vulnerability in HTTP 400 Bad Request Affected: < 5.1.2
CVE-2023-44379	6.1	0%	Feb 22	baserCMS Cross-site Scripting vulnerability in Site search Feature Affected: < 5.0.9
CVE-2023-29009	6.1	1%	Oct 27	basercms XSS Vulnerability via Favorites Feature Affected: < 4.8.0
CVE-2024-46998	5.4	0%	Oct 24	baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature Affected: < 5.1.2
CVE-2024-46996	5.4	0%	Oct 24	baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature Affected: < 5.1.2
CVE-2024-46994	5.4	0%	Oct 24	baserCMS has Cross-site Scripting Vulnerability in Blog posts and Contents list Feature Affected: < 5.1.2
CVE-2024-26128	5.4	1%	Feb 22	baserCMS Cross-site Scripting vulnerability in Content Management Affected: < 5.0.9
CVE-2023-43647	5.4	1%	Oct 30	baserCMS Cross-site Scripting vulnerability in File upload Feature Affected: < 4.8.0
CVE-2026-115480 New	5.3	0%	Oct 23	baserCMS: Public Web API mail-form submission bypasses image CAPTCHA Affected: >= 5.0.0, < 5.3.2; >= 5.4.0, < 5.4.2
CVE-2026-115479 New	5.3	0%	Oct 23	baserCMS: Mail-form auto-replies accept multiple visitor-controlled recipients Affected: >= 5.2.5, < 5.3.2; >= 5.4.0, < 5.4.2
CVE-2026-30878	5.3	0%	Mar 31	baserCMS: Mail Form Acceptance Bypass via Public API Affected: < 5.2.3