Vendor

baserCMS Users Community

28 known vulnerabilities.

Products

BaserCMS 19 baserCMS plugin Blog 3 baserCMS plugin Mail 3 baserCMS plugin Uploader 1 BcAddonMigrator 1 baserCMS plugin Feed 1

All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

Medium 4.8

CVE-2022-41994

baserCMS vulnerable to stored Cross-site Scripting

Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.

baserCMS Users Community BaserCMS baserproject/basercms Packagist

Dec 7, 2022
Medium 4.8

CVE-2022-42486

baserCMS vulnerable to stored Cross-site Scripting

Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.

baserCMS Users Community BaserCMS baserproject/basercms Packagist

Dec 7, 2022
Medium 5.4

CVE-2021-20683

Cross-site Scripting (XSS) in baserCMS

Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.

baserCMS Users Community BaserCMS baserproject/basercms Packagist

Mar 26, 2021
Medium 5.4

CVE-2021-20681

Cross-site Scripting (XSS) in baserCMS

Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.

baserCMS Users Community BaserCMS baserproject/basercms Packagist

Mar 26, 2021
Medium 5.3

CVE-2018-0575

Sensitive Data Exposure in baserCMS

baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction in mail form to view a file which is uploaded by a site user via unspecified vectors.

baserCMS Users Community BaserCMS baserproject/basercms Packagist

Jun 26, 2018
Medium 5.4

CVE-2018-0570

XSS in baserCMS

Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

baserCMS Users Community BaserCMS baserproject/basercms Packagist

Jun 26, 2018
Medium 6.1

CVE-2018-0574

XSS in baserCMS

Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

baserCMS Users Community BaserCMS baserproject/basercms Packagist

Jun 26, 2018
Medium 5.3

CVE-2018-0573

baserCMS Access Control Bypass

baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction for a content to view a file which is uploaded by a site user via unspecified vectors.

baserCMS Users Community BaserCMS baserproject/basercms Packagist

Jun 26, 2018
Medium 4.3

CVE-2018-0571

baserCMS arbitrary file upload vulnerability

baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers with a site operator privilege to upload arbitrary files.

baserCMS Users Community BaserCMS baserproject/basercms Packagist

Jun 26, 2018
Medium 5.4

CVE-2016-4880

baserCMS Cross-site Scripting vulnerability

Cross-site scripting vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

baserCMS Users Community baserCMS plugin Blog baserproject/basercms Packagist

May 12, 2017