Known vulnerabilities in baserCMS - page 4

Software: baserCMS
Software CPE: cpe:2.3:a:baserproject:basercms:*:*:*:*:*:*:*:*
Total vulnerabilities: 70
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting baserCMS baserCMS is affected by 70 known vulnerabilities: 9 high, 15 medium, 46 low Critical High Medium Low

Vulnerabilities (70)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU157662 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-114622
CWE-22 Low
No
No
5.3.2, 5.4.2 25.10.2026 SB2026102517
#VU157661 - Incorrect Default Permissions
CVE-2026-115481
CWE-276 Low
No
No
5.3.2, 5.4.2 25.10.2026 SB2026102517
#VU157660 - Improper input validation
CVE-2026-115479
CWE-20 Medium
No
No
5.3.2, 5.4.2 25.10.2026 SB2026102517
#VU157659 - Improper Control of Interaction Frequency
CVE-2026-115480
CWE-799 Medium
No
No
5.3.2, 5.4.2 25.10.2026 SB2026102517
#VU157658 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-114621
CWE-89 Medium
No
No
5.3.2, 5.4.2 25.10.2026 SB2026102517
#VU157657 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-114623
CWE-22 Low
No
No
5.3.2, 5.4.2 25.10.2026 SB2026102517
#VU157656 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-115457
CWE-79 Medium
No
No
5.3.2, 5.4.2 25.10.2026 SB2026102517
#VU157655 - Deserialization of Untrusted Data
CVE-2026-114624
CWE-502 Low
No
No
5.3.2, 5.4.2 25.10.2026 SB2026102517
#VU140534 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-62956
CWE-89 Medium
No
No
5.3.0 30.07.2026 SB2026073057
#VU140533 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-62950
CWE-89 High
No
No
5.3.0 30.07.2026 SB2026073057


Showing elements 61 - 80 out of 70