baserCMS Users Community vulnerabilities
28 published CVEs name baserCMS Users Community among the affected products.
- 28Published CVEs28 of them scored
- 2Last 12 monthspublished in the last year
- 1Critical14 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-97150
When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config.php" from the addon, which means the PHP code in the file is…
baserCMS Users Community · BcAddonMigrator
High8.6 - CVE-2026-65875
BaserCMS provided by baserCMS Users Community contains a CSV file injection vulnerability. If a user downloads and opens a CSV file containing malicious code…
baserCMS Users Community · BaserCMS
Medium5.1 - CVE-2022-42486
Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an…
baserCMS Users Community · baserCMS
Medium4.8 - CVE-2022-41994
Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an…
baserCMS Users Community · baserCMS
Medium4.8 - CVE-2021-20683
Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to…
baserCMS Users Community · baserCMS
Medium5.4 - CVE-2021-20682
baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors.
baserCMS Users Community · baserCMS
High7.2 - CVE-2021-20681
Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an…
baserCMS Users Community · baserCMS
Medium5.4 - CVE-2018-0575
baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction in mail form to…
baserCMS Users Community · baserCMS
Medium5.3 - CVE-2018-0574
Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to inject…
baserCMS Users Community · baserCMS
Medium6.1 - CVE-2018-0573
baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction for a content to…
baserCMS Users Community · baserCMS
Medium5.3