Known vulnerabilities in baserCMS - page 3

Software: baserCMS
Software CPE: cpe:2.3:a:baserproject:basercms:*:*:*:*:*:*:*:*
Total vulnerabilities: 70
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting baserCMS baserCMS is affected by 70 known vulnerabilities: 9 high, 15 medium, 46 low Critical High Medium Low

Vulnerabilities (70)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140532 - Improper Authorization
CVE-2026-63012
CWE-285 Low
No
No
5.3.0 30.07.2026 SB2026073057
#VU140531 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-62969
CWE-94 Low
No
No
5.3.0 30.07.2026 SB2026073057
#VU140530 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-62955
CWE-22 Low
No
No
5.3.0 30.07.2026 SB2026073057
#VU140529 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-62954
CWE-22 Low
No
No
5.3.0 30.07.2026 SB2026073057
#VU140528 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-59872
CWE-89 Low
No
No
5.3.0 30.07.2026 SB2026073057
#VU140527 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-62953
CWE-22 Low
No
No
5.3.0 30.07.2026 SB2026073057
#VU140526 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-62952
CWE-78 Low
No
No
5.3.0 30.07.2026 SB2026073057
#VU140525 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-62951
CWE-89 Medium
No
No
5.3.0 30.07.2026 SB2026073057
#VU140524 - Improper Neutralization of Formula Elements in a CSV File
CVE-2026-65875
CWE-1236 Medium
No
No
5.3.0 30.07.2026 SB2026073057
#VU140522 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-76635
CWE-89 Low
No
No
5.3.0 30.07.2026 SB2026073057
#VU140523 - Improper Control of Generation of Code ('Code Injection')
CWE-94 Medium
No
No
5.3.0 30.07.2026 SB2026073057
#VU58378 - Unrestricted Upload of File with Dangerous Type
CVE-2021-41279
CWE-434 Medium
No
No
4.5.4 26.11.2021 SB2021112601
#VU58377 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-41243
CWE-78 Medium
No
No
4.5.4 26.11.2021 SB2021112601
#VU56122 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-39136
CWE-79 Low
No
No
4.5.1 27.08.2021 SB2021082701
#VU51752 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20683
CWE-79 Low
No
No
4.4.5 29.03.2021 SB2021032903
#VU51751 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-20682
CWE-78 Low
No
No
4.4.5 29.03.2021 SB2021032903
#VU51750 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20681
CWE-79 Low
No
No
4.4.5 29.03.2021 SB2021032903
#VU46663 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15155
CWE-79 Low
No
No
4.3.7 11.09.2020 SB2020091119
#VU46662 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15154
CWE-79 Low
No
No
4.3.7 11.09.2020 SB2020091119
#VU46661 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15159
CWE-79 Low
No
No
4.3.7 11.09.2020 SB2020091119


Showing elements 41 - 60 out of 70