BA
Vendor
baserproject
30
CVEs
0
On KEV
8
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115457 New | BA basercms baserproject | 7.1 | Oct 23 | baserCMS: Unauthenticated Stored XSS via Shortcode Expansion in Blog Comments |
| CVE-2026-114624 New | BA basercms baserproject | 7.2 | Oct 23 | baserCMS: PHP object injection via unguarded unserialize() in the widget-area entity |
| CVE-2026-114623 New | BA basercms baserproject | 6.5 | Oct 23 | baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosure |
| CVE-2026-114622 New | BA basercms baserproject | 7.2 | Oct 23 | baserCMS: Encoded path traversal bypass in the theme file API |
| CVE-2026-114621 New | BA basercms baserproject | 8.8 | Oct 23 | baserCMS: SQL injection in the admin panel and admin API |
| CVE-2026-115480 New | BA basercms baserproject | 5.3 | Oct 23 | baserCMS: Public Web API mail-form submission bypasses image CAPTCHA |
| CVE-2026-115479 New | BA basercms baserproject | 5.3 | Oct 23 | baserCMS: Mail-form auto-replies accept multiple visitor-controlled recipients |
| CVE-2026-115481 New | BA basercms baserproject | 8.5 | Oct 23 | baserCMS: BcCustomContent file fields can be configured to allow executable file extensions such as php, leading to arbitrary PHP file upload |
| CVE-2026-76635 | BA basercms baserproject | 7.2 | Aug 20 | baserCMS < 5.3.0 SQL Injection and Code Injection via BcDatabaseService.php |
| CVE-2026-32734 | BA basercms baserproject | 6.1 | Mar 31 | baserCMS: Multiple vulnerabilities in baserCMS |
| CVE-2026-30879 | BA basercms baserproject | 6.1 | Mar 31 | baserCMS: Cross-site scripting vulnerability in blog post |
| CVE-2026-30940 | BA basercms baserproject | 7.2 | Mar 31 | baserCMS: Path Traversal in Theme File API Leads to Arbitrary File Write and RCE |
| CVE-2026-30878 | BA basercms baserproject | 5.3 | Mar 31 | baserCMS: Mail Form Acceptance Bypass via Public API |
| CVE-2026-30877 | BA basercms baserproject | 7.2 | Mar 31 | baserCMS: OS Command Injection in the baserCMS Update Functionality |
| CVE-2026-30880 | BA basercms baserproject | 9.8 | Mar 31 | baserCMS: OS command injection vulnerability in installer |
| CVE-2026-27697 | BA basercms baserproject | 9.8 | Mar 31 | baserCMS: SQL injection vulnerability in blog post |
| CVE-2026-21861 | BA basercms baserproject | 7.2 | Mar 31 | baserCMS: OS Command Injection Leading to Remote Code Execution (RCE) |
| CVE-2025-32957 | BA basercms baserproject | 7.2 | Mar 31 | baserCMS: unsafe File Upload Leading to Remote Code Execution (RCE) |
| CVE-2024-46998 | BA basercms baserproject | 5.4 | Oct 24 | baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature |
| CVE-2024-46996 | BA basercms baserproject | 5.4 | Oct 24 | baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature |
| CVE-2024-46995 | BA basercms baserproject | 6.1 | Oct 24 | baserCMS has Cross-site Scripting Vulnerability in HTTP 400 Bad Request |
| CVE-2024-46994 | BA basercms baserproject | 5.4 | Oct 24 | baserCMS has Cross-site Scripting Vulnerability in Blog posts and Contents list Feature |
| CVE-2024-26128 | BA basercms baserproject | 5.4 | Feb 22 | baserCMS Cross-site Scripting vulnerability in Content Management |
| CVE-2023-51450 | BA basercms baserproject | 8.1 | Feb 22 | baserCMS OS command injection vulnerability in Installer |
| CVE-2023-44379 | BA basercms baserproject | 6.1 | Feb 22 | baserCMS Cross-site Scripting vulnerability in Site search Feature |
| CVE-2023-43792 | BA basercms baserproject | 9.8 | Oct 30 | baserCMS Code Injection Vulnerability in Mail Form Feature |
| CVE-2023-43649 | BA basercms baserproject | 9.8 | Oct 30 | baserCMS CSRF vulnerability in Content preview Feature |
| CVE-2023-43648 | BA basercms baserproject | 6.5 | Oct 30 | baserCMS Directory Traversal vulnerability in Form submission data management Feature |
| CVE-2023-43647 | BA basercms baserproject | 5.4 | Oct 30 | baserCMS Cross-site Scripting vulnerability in File upload Feature |
| CVE-2023-29009 | BA basercms baserproject | 6.1 | Oct 27 | basercms XSS Vulnerability via Favorites Feature |