Approved changes feed: RSS · Atom

cpe:2.3:a:basercms_users_community:basercms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBasercms Users Community (73ec16ec-5a42-5e73-89dd-b08352a2ad72)
ProductBasercms (71bdc997-f19f-5657-87b2-48842c72741c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-42486 vulnerable 2026-06-08 05:49:30.100571 Details available
Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.
Published: 2022-12-07T00:00:00.000Z
Updated: 2025-04-23T16:02:53.115Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41994 vulnerable 2026-06-08 05:49:29.084606 Details available
Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.
Published: 2022-12-07T00:00:00.000Z
Updated: 2025-04-23T14:28:32.166Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20683 vulnerable 2026-06-08 05:29:10.235105 Details available
Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.
Published: 2021-03-26T08:50:29.000Z
Updated: 2024-08-03T17:45:45.450Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20682 vulnerable 2026-06-08 05:29:10.234774 Details available
baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors.
Published: 2021-03-26T08:50:28.000Z
Updated: 2024-08-03T17:45:45.157Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20681 vulnerable 2026-06-08 05:29:10.233412 Details available
Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.
Published: 2021-03-26T08:50:27.000Z
Updated: 2024-08-03T17:45:45.212Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-0575 vulnerable 2026-06-08 05:10:24.158197 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-0574 vulnerable 2026-06-08 05:10:24.157894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-0573 vulnerable 2026-06-08 05:10:24.157512 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-0572 vulnerable 2026-06-08 05:10:24.157239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-0571 vulnerable 2026-06-08 05:10:24.156952 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-0570 vulnerable 2026-06-08 05:10:24.156647 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-0569 vulnerable 2026-06-08 05:10:24.155629 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-10843 vulnerable 2026-06-08 05:08:36.372146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-10842 vulnerable 2026-06-08 05:08:36.371189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4883 vulnerable 2026-06-08 05:07:55.507234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4882 vulnerable 2026-06-08 05:07:55.506923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4878 vulnerable 2026-06-08 05:07:55.502463 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4876 vulnerable 2026-06-08 05:07:55.499526 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.