Approved changes feed: RSS · Atom
cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Basercms (07702311-5954-5ba8-aa45-bf97a51b4cf6) |
|---|---|
| Product | Basercms (afc919f1-859b-5353-bffe-4cb37c94abab) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/baserproject/basercms |
purl2cpe | 2026-06-01 10:16:33.817043 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-32734 |
vulnerable | 2026-06-08 07:57:18.098624 |
baserCMS: Multiple vulnerabilities in baserCMS
HIGH (7.1)
baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has DOM-based cross-site scripting in tag creation. This issue has been patched in version 5.2.3.
Published: 2026-03-31T00:46:43.317Z
Updated: 2026-03-31T18:53:24.730Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-30940 |
vulnerable | 2026-06-08 07:57:14.573194 |
baserCMS: Path Traversal in Theme File API Leads to Arbitrary File Write and RCE
HIGH (7.2)
baserCMS is a website development framework. Prior to version 5.2.3, a path traversal vulnerability exists in the theme file management API (/baser/api/admin/bc-theme-file/theme_files/add.json) that allows arbitrary file write. An authenticated administrator can include ../ sequences in the path parameter to create a PHP file in an arbitrary directory outside the theme directory, which may result in remote code execution (RCE). This issue has been patched in version 5.2.3.
Published: 2026-03-31T00:45:35.177Z
Updated: 2026-04-02T14:46:54.107Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-30880 |
vulnerable | 2026-06-08 07:57:14.425222 |
baserCMS: OS command injection vulnerability in installer
baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has an OS command injection vulnerability in the installer. This issue has been patched in version 5.2.3.
Published: 2026-03-31T00:44:39.344Z
Updated: 2026-03-31T15:27:21.969Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-30879 |
vulnerable | 2026-06-08 07:57:14.424832 |
baserCMS: Cross-site scripting vulnerability in blog post
baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a cross-site scripting vulnerability in blog posts. This issue has been patched in version 5.2.3.
Published: 2026-03-31T00:45:50.416Z
Updated: 2026-03-31T14:00:32.272Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-30878 |
vulnerable | 2026-06-08 07:57:14.424401 |
baserCMS: Mail Form Acceptance Bypass via Public API
MEDIUM (5.3)
baserCMS is a website development framework. Prior to version 5.2.3, a public mail submission API allows unauthenticated users to submit mail form entries even when the corresponding form is not accepting submissions. This bypasses administrative controls intended to stop form intake and enables spam or abuse via the API. This issue has been patched in version 5.2.3.
Published: 2026-03-31T00:45:21.294Z
Updated: 2026-03-31T19:09:18.507Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-30877 |
vulnerable | 2026-06-08 07:57:14.423873 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27697 |
vulnerable | 2026-06-08 07:53:22.887819 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21861 |
vulnerable | 2026-06-08 07:49:16.851956 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32957 |
vulnerable | 2026-06-08 07:19:01.235255 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46998 |
vulnerable | 2026-06-08 06:48:10.967664 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46996 |
vulnerable | 2026-06-08 06:48:10.966887 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46995 |
vulnerable | 2026-06-08 06:48:10.966413 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46994 |
vulnerable | 2026-06-08 06:48:10.965929 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-26128 |
vulnerable | 2026-06-08 06:31:24.845304 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51450 |
vulnerable | 2026-06-08 06:16:17.555523 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-44379 |
vulnerable | 2026-06-08 06:12:40.866155 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43792 |
vulnerable | 2026-06-08 06:12:38.022329 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43649 |
vulnerable | 2026-06-08 06:12:37.651648 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43648 |
vulnerable | 2026-06-08 06:12:37.651124 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43647 |
vulnerable | 2026-06-08 06:12:37.650624 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29009 |
vulnerable | 2026-06-08 06:02:37.921592 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25655 |
vulnerable | 2026-06-08 05:56:09.608997 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25654 |
vulnerable | 2026-06-08 05:56:09.608381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42486 |
vulnerable | 2026-06-08 05:49:30.100703 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41994 |
vulnerable | 2026-06-08 05:49:29.085774 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39325 |
vulnerable | 2026-06-08 05:47:18.606490 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41279 |
vulnerable | 2026-06-08 05:35:20.108938 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41243 |
vulnerable | 2026-06-08 05:35:20.040388 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39136 |
vulnerable | 2026-06-08 05:33:48.938725 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20683 |
vulnerable | 2026-06-08 05:29:10.235142 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20682 |
vulnerable | 2026-06-08 05:29:10.234811 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20681 |
vulnerable | 2026-06-08 05:29:10.234429 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15277 |
vulnerable | 2026-06-08 05:19:25.635359 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15276 |
vulnerable | 2026-06-08 05:19:25.634969 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15273 |
vulnerable | 2026-06-08 05:19:25.631803 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15159 |
vulnerable | 2026-06-08 05:19:25.400536 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15155 |
vulnerable | 2026-06-08 05:19:25.387518 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15154 |
vulnerable | 2026-06-08 05:19:25.386878 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18943 |
vulnerable | 2026-06-08 05:11:14.985351 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18942 |
vulnerable | 2026-06-08 05:11:14.984933 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0575 |
vulnerable | 2026-06-08 05:10:24.158225 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0574 |
vulnerable | 2026-06-08 05:10:24.157932 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0573 |
vulnerable | 2026-06-08 05:10:24.157540 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0572 |
vulnerable | 2026-06-08 05:10:24.157267 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0571 |
vulnerable | 2026-06-08 05:10:24.156981 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0570 |
vulnerable | 2026-06-08 05:10:24.156683 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0569 |
vulnerable | 2026-06-08 05:10:24.156298 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-10844 |
vulnerable | 2026-06-08 05:08:36.372517 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-10843 |
vulnerable | 2026-06-08 05:08:36.372190 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-10842 |
vulnerable | 2026-06-08 05:08:36.371791 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4879 |
vulnerable | 2026-06-08 05:07:55.504011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5641 |
vulnerable | 2026-06-08 05:06:50.627914 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5640 |
vulnerable | 2026-06-08 05:06:50.627538 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1248 |
vulnerable | 2026-06-08 05:00:48.393845 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2674 |
vulnerable | 2026-06-08 04:58:08.365330 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2673 |
vulnerable | 2026-06-08 04:58:08.349596 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.