Known vulnerabilities in baserCMS

Software: baserCMS
Software CPE: cpe:2.3:a:baserproject:basercms:*:*:*:*:*:*:*:*
Total vulnerabilities: 70
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting baserCMS baserCMS is affected by 70 known vulnerabilities: 9 high, 15 medium, 46 low Critical High Medium Low

Vulnerabilities (70)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU152772 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
5.3.1, 5.4.1 29.09.2026 SB2026092941
#VU152771 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
5.3.1, 5.4.1 29.09.2026 SB2026092941
#VU152770 - Missing Authorization
CVE-2026-93462
CWE-862 Medium
No
No
5.3.1, 5.4.1 29.09.2026 SB2026092941
#VU152769 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-93464
CWE-79 Low
No
No
5.3.1, 5.4.1 29.09.2026 SB2026092941
#VU152768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-93463
CWE-79 Low
No
No
5.3.1, 5.4.1 29.09.2026 SB2026092941
#VU152767 - Incorrect Permission Assignment for Critical Resource
CWE-732 Low
No
No
5.4.1 29.09.2026 SB2026092941
#VU152766 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
5.3.1, 5.4.1 29.09.2026 SB2026092941
#VU152765 - Improper Restriction of Excessive Authentication Attempts
CWE-307 High
No
No
5.3.1, 5.4.1 29.09.2026 SB2026092941
#VU152764 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
No
No
5.3.1, 5.4.1 29.09.2026 SB2026092941
#VU152763 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-93460
CWE-79 Low
No
No
5.3.1, 5.4.1 29.09.2026 SB2026092941
#VU128065 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-30940
CWE-22 Low
No
No
5.2.3 27.04.2026 SB2026032721
#VU128064 - Improper Authorization
CVE-2026-30878
CWE-285 Medium
No
No
5.2.3 27.04.2026 SB2026032721
#VU128063 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-30877
CWE-78 Low
No
No
5.2.3 27.04.2026 SB2026032721
#VU124647 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-32734
CWE-79 Low
No
No
5.2.3 27.03.2026 SB2026032721
#VU124646 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-27697
CWE-89 High
No
No
5.2.3 27.03.2026 SB2026032721
#VU124645 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-30880
CWE-78 High
No
No
5.2.3 27.03.2026 SB2026032721
#VU124644 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-30879
CWE-79 Low
No
No
5.2.3 27.03.2026 SB2026032721
#VU128062 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15273
CWE-79 Low
No
No
4.4.1 29.10.2020 SB2020102978
#VU128061 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15277
CWE-79 Low
No
No
4.4.1 29.10.2020 SB2020102978
#VU128060 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15276
CWE-79 Medium
No
No
4.4.1 29.10.2020 SB2020102978


Showing elements 1 - 20 out of 70