Known vulnerabilities in baserCMS

Software: baserCMS
Software CPE: cpe:2.3:a:baserproject:basercms:*:*:*:*:*:*:*:*
Total vulnerabilities: 52
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting baserCMS baserCMS is affected by 52 known vulnerabilities: 5 high, 10 medium, 37 low Critical High Medium Low

Vulnerabilities (52)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140534 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-62956
CWE-89 Medium
No
No
5.3.0 30.07.2026 SB2026073057
#VU140533 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-62950
CWE-89 High
No
No
5.3.0 30.07.2026 SB2026073057
#VU140532 - Improper Authorization
CVE-2026-63012
CWE-285 Low
No
No
5.3.0 30.07.2026 SB2026073057
#VU140531 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-62969
CWE-94 Low
No
No
5.3.0 30.07.2026 SB2026073057
#VU140530 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-62955
CWE-22 Low
No
No
5.3.0 30.07.2026 SB2026073057
#VU140529 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-62954
CWE-22 Low
No
No
5.3.0 30.07.2026 SB2026073057
#VU140528 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-59872
CWE-89 Low
No
No
5.3.0 30.07.2026 SB2026073057
#VU140527 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-62953
CWE-22 Low
No
No
5.3.0 30.07.2026 SB2026073057
#VU140526 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-62952
CWE-78 Low
No
No
5.3.0 30.07.2026 SB2026073057
#VU140525 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-62951
CWE-89 Medium
No
No
5.3.0 30.07.2026 SB2026073057
#VU140524 - Improper Neutralization of Formula Elements in a CSV File
CVE-2026-65875
CWE-1236 Medium
No
No
5.3.0 30.07.2026 SB2026073057
#VU140522 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Low
No
No
5.3.0 30.07.2026 SB2026073057
#VU140523 - Improper Control of Generation of Code ('Code Injection')
CWE-94 Medium
No
No
5.3.0 30.07.2026 SB2026073057
#VU128066 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-21861
CWE-78 Low
No
No
5.2.3 27.04.2026 SB2026032721
#VU128064 - Improper Authorization
CVE-2026-30878
CWE-285 Medium
No
No
5.2.3 27.04.2026 SB2026032721
#VU128063 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-30877
CWE-78 Low
No
No
5.2.3 27.04.2026 SB2026032721
#VU124647 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-32734
CWE-79 Low
No
No
5.2.3 27.03.2026 SB2026032721
#VU124646 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-27697
CWE-89 High
No
No
5.2.3 27.03.2026 SB2026032721
#VU124645 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-30880
CWE-78 High
No
No
5.2.3 27.03.2026 SB2026032721
#VU124644 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-30879
CWE-79 Low
No
No
5.2.3 27.03.2026 SB2026032721


Showing elements 1 - 20 out of 52