Export limit exceeded: 12175 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2026-97150

Arbitrary PHP Code Execution via Config.php Inclusion during Addon Migration

When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config.php" from the addon, which means the PHP code in the file is executed. Arbitrary files on the system may be read or deleted by an administrative user.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Basercms Users Community
Products
Bcaddonmigrator