baserCMS Users Community vulnerabilities

CVEs per yearBy the year they were published

1. 201714
2. 20187
3. 20213
4. 20222
5. 20262

Newest CVEs

• CVE-2026-97150

  When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config.php" from the addon, which means the PHP code in the file is…

  baserCMS Users Community · BcAddonMigrator

  High8.6
• CVE-2026-65875

  BaserCMS provided by baserCMS Users Community contains a CSV file injection vulnerability. If a user downloads and opens a CSV file containing malicious code…

  baserCMS Users Community · BaserCMS

  Medium5.1
• CVE-2022-42486

  Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an…

  baserCMS Users Community · baserCMS

  Medium4.8
• CVE-2022-41994

  Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an…

  baserCMS Users Community · baserCMS

  Medium4.8
• CVE-2021-20683

  Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to…

  baserCMS Users Community · baserCMS

  Medium5.4
• CVE-2021-20682

  baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors.

  baserCMS Users Community · baserCMS

  High7.2
• CVE-2021-20681

  Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an…

  baserCMS Users Community · baserCMS

  Medium5.4
• CVE-2018-0575

  baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction in mail form to…

  baserCMS Users Community · baserCMS

  Medium5.3
• CVE-2018-0574

  Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to inject…

  baserCMS Users Community · baserCMS

  Medium6.1
• CVE-2018-0573

  baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction for a content to…

  baserCMS Users Community · baserCMS

  Medium5.3