Known vulnerabilities in baserCMS - page 3

Software: baserCMS
Software CPE: cpe:2.3:a:baserproject:basercms:*:*:*:*:*:*:*:*
Total vulnerabilities: 52
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting baserCMS baserCMS is affected by 52 known vulnerabilities: 5 high, 10 medium, 37 low Critical High Medium Low

Vulnerabilities (52)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58378 - Unrestricted Upload of File with Dangerous Type
CVE-2021-41279
CWE-434 Medium
No
No
4.5.4 26.11.2021 SB2021112601
#VU58377 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-41243
CWE-78 Medium
No
No
4.5.4 26.11.2021 SB2021112601
#VU56122 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-39136
CWE-79 Low
No
No
4.5.1 27.08.2021 SB2021082701
#VU51752 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20683
CWE-79 Low
No
No
4.4.5 29.03.2021 SB2021032903
#VU51751 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-20682
CWE-78 Low
No
No
4.4.5 29.03.2021 SB2021032903
#VU51750 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20681
CWE-79 Low
No
No
4.4.5 29.03.2021 SB2021032903
#VU128062 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15273
CWE-79 Low
No
No
4.4.1 29.10.2020 SB2020102978
#VU128061 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15277
CWE-79 Low
No
No
4.4.1 29.10.2020 SB2020102978
#VU128060 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15276
CWE-79 Medium
No
No
4.4.1 29.10.2020 SB2020102978
#VU46663 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15155
CWE-79 Low
No
No
4.3.7 11.09.2020 SB2020091119
#VU46662 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15154
CWE-79 Low
No
No
4.3.7 11.09.2020 SB2020091119
#VU46661 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15159
CWE-79 Low
No
No
4.3.7 11.09.2020 SB2020091119


Showing elements 41 - 60 out of 52