Vulnerabilities (CVE)

Filtered by vendor Basercms Subscribe
Filtered by product Basercms
Total 68 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-0572 1 Basercms 1 Basercms 2024-11-21 5.5 MEDIUM 8.1 HIGH
baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to bypass access restriction to view or alter a restricted content via unspecified vectors.
CVE-2018-0571 1 Basercms 1 Basercms 2024-11-21 4.0 MEDIUM 4.3 MEDIUM
baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers with a site operator privilege to upload arbitrary files.
CVE-2018-0570 1 Basercms 1 Basercms 2024-11-21 3.5 LOW 5.4 MEDIUM
Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2018-0569 1 Basercms 1 Basercms 2024-11-21 6.5 MEDIUM 8.8 HIGH
baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to execute arbitrary OS commands via unspecified vectors.
CVE-2024-46995 1 Basercms 1 Basercms 2024-10-28 N/A 6.1 MEDIUM
baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in HTTP 400 Bad Request. Version 5.1.2 fixes this issue.
CVE-2024-46998 1 Basercms 1 Basercms 2024-10-28 N/A 5.4 MEDIUM
baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Edit Email Form Settings Feature. Version 5.1.2 fixes the issue.
CVE-2024-46996 1 Basercms 1 Basercms 2024-10-28 N/A 5.4 MEDIUM
baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Blog posts feature. Version 5.1.2 fixes this issue.
CVE-2024-46994 1 Basercms 1 Basercms 2024-10-28 N/A 5.4 MEDIUM
baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog posts and Contents list Feature. Version 5.1.2 fixes this issue.