Basercms Users Community Basercms
19 CVEs affecting Basercms Users Community Basercms. Latest disclosed: 2026-08-03. Critical: 1, High: 8.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-10842 | Critical | 9.8 | 2017-08-29 | SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vec… |
CVE-2018-0569 | High | 8.8 | 2018-06-26 | baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to execute arbitrary OS commands v… |
CVE-2016-4882 | High | 8.8 | 2017-05-12 | Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators v… |
CVE-2016-4878 | High | 8.8 | 2017-05-12 | Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators v… |
CVE-2016-4876 | High | 8.8 | 2017-05-12 | Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators t… |
CVE-2018-0572 | High | 8.1 | 2018-06-26 | baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to bypass access restriction to vi… |
CVE-2017-10843 | High | 7.5 | 2017-08-29 | baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "File" field is being… |
CVE-2021-20682 | High | 7.2 | 2021-03-26 | baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors. |
CVE-2026-65875 | High | 7.1 | 2026-08-03 | BaserCMS provided by baserCMS Users Community contains a CSV file injection vulnerability. If a user downloads and opens a CSV file containing malicious code i… |
CVE-2018-0574 | Medium | 6.1 | 2018-06-26 | Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to inject… |
CVE-2021-20683 | Medium | 5.4 | 2021-03-26 | Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to i… |
CVE-2021-20681 | Medium | 5.4 | 2021-03-26 | Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an… |
CVE-2018-0570 | Medium | 5.4 | 2018-06-26 | Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attack… |
CVE-2016-4883 | Medium | 5.4 | 2017-05-12 | Cross-site scripting vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vector… |
CVE-2018-0575 | Medium | 5.3 | 2018-06-26 | baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction in mail form to vie… |
CVE-2018-0573 | Medium | 5.3 | 2018-06-26 | baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction for a content to vi… |
CVE-2022-42486 | Medium | 4.8 | 2022-12-07 | Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administr… |
CVE-2022-41994 | Medium | 4.8 | 2022-12-07 | Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrat… |
CVE-2018-0571 | Medium | 4.3 | 2018-06-26 | baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers with a site operator privilege to upload arbitra… |