Known vulnerabilities in baserCMS - page 2

Software: baserCMS
Software CPE: cpe:2.3:a:baserproject:basercms:*:*:*:*:*:*:*:*
Total vulnerabilities: 52
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting baserCMS baserCMS is affected by 52 known vulnerabilities: 5 high, 10 medium, 37 low Critical High Medium Low

Vulnerabilities (52)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128067 - Improper Access Control
CVE-2025-32957
CWE-284 Low
No
No
5.2.3 27.04.2026 SB2026032721
#VU128065 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-30940
CWE-22 Low
No
No
5.2.3 27.04.2026 SB2026032721
#VU99655 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-46994
CWE-79 Low
No
No
4.8.2, 5.1.3 04.11.2024 SB2024110417
#VU99653 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-46995
CWE-79 Low
No
No
4.8.2, 5.1.3 04.11.2024 SB2024110417
#VU99652 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-46998
CWE-79 Low
No
No
4.8.2, 5.1.3 04.11.2024 SB2024110417
#VU99651 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-46996
CWE-79 Low
No
No
4.8.2, 5.1.3 04.11.2024 SB2024110417
#VU88138 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
4.8.1 04.04.2024 SB2024040436
#VU86778 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-44379
CWE-79 Low
No
No
5.0.9 26.02.2024 SB2024022618
#VU86775 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-51450
CWE-78 High
No
No
5.0.9 26.02.2024 SB2024022618
#VU86774 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-26128
CWE-79 Low
No
No
5.0.9 26.02.2024 SB2024022618
#VU82462 - Cross-Site Request Forgery (CSRF)
CVE-2023-29009
CWE-352 Low
No
No
4.8.0 26.10.2023 SB2023102631
#VU82461 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-43647
CWE-79 Low
No
No
4.8.0 26.10.2023 SB2023102631
#VU82460 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-43792
CWE-94 High
No
No
4.7.7 26.10.2023 SB2023103005
#VU82459 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-43648
CWE-22 Low
No
No
4.8.0 26.10.2023 SB2023102631
#VU82458 - Cross-Site Request Forgery (CSRF)
CVE-2023-43649
CWE-352 Low
No
No
4.8.0 26.10.2023 SB2023102631
#VU73994 - Unrestricted Upload of File with Dangerous Type
CVE-2023-25654
CWE-434 Medium
No
No
4.7.5 23.03.2023 SB2023032366
#VU73993 - Unrestricted Upload of File with Dangerous Type
CVE-2023-25655
CWE-434 Medium
No
No
4.7.5 23.03.2023 SB2023032366
#VU69578 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-42486
CWE-79 Low
No
No
4.7.2 24.11.2022 SB2022112415
#VU69577 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-41994
CWE-79 Low
No
No
4.7.2 24.11.2022 SB2022112415
#VU69576 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-39325
CWE-79 Low
No
No
4.7.2 24.11.2022 SB2022112415


Showing elements 21 - 40 out of 52