Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 69

Export CSV
CVE-2018-0573

baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction for a content to view a file which is uploaded by a site user via unspecified vectors.

CVSS 3.0 · 5.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Basercms
Products
Basercms
CVE-2018-0572

baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to bypass access restriction to view or alter a restricted content via unspecified vectors.

CVSS 3.0 · 8.1 High EPSS 1.6% KEV · Not listed
Vendors
Basercms
Products
Basercms
CVE-2018-0571

baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers with a site operator privilege to upload arbitrary files.

CVSS 3.0 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Basercms
Products
Basercms
CVE-2018-0570

Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Basercms
Products
Basercms
CVE-2018-0569

baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to execute arbitrary OS commands via unspecified vectors.

CVSS 3.0 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Basercms
Products
Basercms
CVE-2024-46995

baserCMS has Cross-site Scripting Vulnerability in HTTP 400 Bad Request

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in HTTP 400 Bad Request. Version 5.1.2 fixes this issue.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Basercms
Products
Basercms
CVE-2024-46998

baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Edit Email Form Settings Feature. Version 5.1.2 fixes the issue.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Basercms
Products
Basercms
CVE-2024-46996

baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Blog posts feature. Version 5.1.2 fixes this issue.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Basercms
Products
Basercms
CVE-2024-46994

baserCMS has Cross-site Scripting Vulnerability in Blog posts and Contents list Feature

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog posts and Contents list Feature. Version 5.1.2 fixes this issue.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Basercms
Products
Basercms