baserproject/basercms (Packagist)
Advisories
66
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 5.2.3 or later clears every advisory below that has a fix.
Upgrade commands
composer
composer require baserproject/basercms:^5.2.3Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-677c-xv24-crgx baserCMS is Vulnerable to Cross-site Scripting |
Medium EPSS 0.27% |
< 5.2.3 | 5.2.3 |
| GHSA-c5c6-37vq-pjcq baserCMS Path Traversal Leads to Arbitrary File Write and RCE via Theme File API |
High EPSS 1.07% |
< 5.2.3 | 5.2.3 |
| GHSA-6hpg-8rx3-cwgv baserCMS has OS command injection vulnerability in installer |
Critical EPSS 2.07% |
< 5.2.3 | 5.2.3 |
| GHSA-jmq3-x8q7-j9qm baserCMS has a cross-site scripting vulnerability in blog posts |
Medium EPSS 0.24% |
< 5.2.3 | 5.2.3 |
| GHSA-8cr7-r8qw-gp3c baserCMS has Mail Form Acceptance Bypass via Public API |
Medium EPSS 0.40% |
< 5.2.3 | 5.2.3 |
| GHSA-m9g7-rgfc-jcm7 baserCMS Update Functionality Vulnerable to OS Command Injection |
High EPSS 1.54% |
< 5.2.3 | 5.2.3 |
| GHSA-vh89-rjph-2g7p baserCMS has an SQL injection vulnerability in its blog post functionality |
Critical EPSS 0.43% |
< 5.2.3 | 5.2.3 |
| GHSA-qxmc-6f24-g86g baserCMS has OS Command Injection Leading to Remote Code Execution (RCE) |
High EPSS 2.32% |
< 5.2.3 | 5.2.3 |
| GHSA-hv78-cwp4-8r7r baserCMS has Unsafe File Upload Leading to Remote Code Execution (RCE) |
High EPSS 0.59% |
< 5.2.3 | 5.2.3 |
| GHSA-p3m2-mj3j-j49x baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature |
Medium EPSS 0.36% |
< 5.1.2 | 5.1.2 |
| GHSA-66jv-qrm3-vvfg baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature |
Medium EPSS 0.33% |
< 5.1.2 | 5.1.2 |
| GHSA-mr7q-fv7j-jcgv baserCMS has a Cross-site Scripting (XSS) Vulnerability in HTTP 400 Bad Request |
Medium EPSS 0.35% |
< 5.1.2 | 5.1.2 |
| GHSA-wrjc-fmfq-w3jr baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts and Contents list Feature |
Medium EPSS 0.30% |
< 5.1.2 | 5.1.2 |
| GHSA-jjxq-m8h3-4vw5 baserCMS Cross-site Scripting vulnerability in Content Management |
Medium EPSS 0.57% |
< 5.0.9 | 5.0.9 |
| GHSA-77fc-4cv5-hmfr baserCMS OS command injection vulnerability in Installer |
High EPSS 1.46% |
< 5.0.9 | 5.0.9 |
| GHSA-66c2-p8rh-qx87 baserCMS Cross-site Scripting vulnerability in Site search Feature |
Medium EPSS 0.47% |
< 5.0.9 | 5.0.9 |
| GHSA-vrm6-c878-fpq6 baserCMS Code Injection Vulnerability in Mail Form Feature |
Critical EPSS 0.68% |
>= 4.6.0, <= 4.7.6 | No fix yet |
| GHSA-fw9x-cqjq-7jx5 baserCMS CSRF vulnerability in Content preview Feature |
Critical EPSS 0.42% |
< 4.8.0 | 4.8.0 |
| GHSA-hmqj-gv2m-hq55 baserCMS Directory Traversal vulnerability in Form submission data management Feature |
Medium EPSS 1.21% |
< 4.8.0 | 4.8.0 |
| GHSA-ggj4-78rm-6xgv baserCMS Cross-site Scripting vulnerability in File upload Feature |
Medium EPSS 0.61% |
< 4.8.0 | 4.8.0 |
| GHSA-8vqx-prq4-rqrq baserCMS Cross-site Scripting Vulnerability in Favorites Feature |
Medium EPSS 0.56% |
< 4.8.0 | 4.8.0 |
| GHSA-mfvg-qwcw-qvc8 baserCMS allows any file to be uploaded |
Critical EPSS 1.09% |
< 4.7.5 | 4.7.5 |
| GHSA-h4cc-fxpp-pgw9 baserCMS File Uploader Remote Code Execution (RCE) vulnerability |
Critical EPSS 1.53% |
< 4.7.5 | 4.7.5 |
| GHSA-vxwf-79ch-f7f7 baserCMS vulnerable to stored Cross-site Scripting |
Medium EPSS 0.62% |
< 4.7.2 | 4.7.2 |
| GHSA-7w2v-35j3-xrm9 baserCMS vulnerable to stored Cross-site Scripting |
Medium EPSS 0.62% |
< 4.7.2 | 4.7.2 |
| GHSA-395x-wv32-44v5 baserproject/basercms vulnerable to cross-site scripting (XSS) vulnerability |
Medium EPSS 0.61% |
< 4.7.2 | 4.7.2 |
| GHSA-46vm-rwrf-jrxm CSRF in baserCMS 3.0.10 and earlier |
High EPSS 0.94% |
< 3.0.11 | 3.0.11 |
| GHSA-fg52-rc36-jp43 baserCMS Cross Site Request Forgery vulnerability |
High EPSS 0.94% |
< 3.0.11 | 3.0.11 |
| GHSA-mxfv-c8p8-qw5h baserCMS Cross-site Scripting vulnerability |
Medium EPSS 0.92% |
< 3.0.11 | 3.0.11 |
| GHSA-3mcp-6rv6-c69g baserCMS arbitrary file upload vulnerability |
Medium EPSS 1.13% |
>= 4.0.0, < 4.1.1 | 4.1.1 |
| GHSA-994g-74gq-5qpr XSS in baserCMS |
Medium EPSS 0.68% |
>= 4.0.0, <= 4.1.0.1 | No fix yet |
| GHSA-994g-74gq-5qpr XSS in baserCMS |
Medium EPSS 0.68% |
<= 3.0.15 | No fix yet |
| GHSA-3mcp-6rv6-c69g baserCMS arbitrary file upload vulnerability |
Medium EPSS 1.13% |
< 3.0.16 | 3.0.16 |
| GHSA-6j3p-vrph-j7qq OS Command Injection in baserCMS |
High EPSS 1.50% |
>= 4.0.0, <= 4.1.0.1 | No fix yet |
| GHSA-6j3p-vrph-j7qq OS Command Injection in baserCMS |
High EPSS 1.50% |
<= 3.0.15 | No fix yet |
| GHSA-w935-p7mg-xc96 Sensitive Data Exposure in baserCMS |
Medium EPSS 1.18% |
<= 3.0.15 | No fix yet |
| GHSA-6qjv-43mf-rgrh XSS in baserCMS |
Medium EPSS 0.84% |
>= 4.0.0, <= 4.1.0.1 | No fix yet |
| GHSA-6qjv-43mf-rgrh XSS in baserCMS |
Medium EPSS 0.84% |
<= 3.0.15 | No fix yet |
| GHSA-w935-p7mg-xc96 Sensitive Data Exposure in baserCMS |
Medium EPSS 1.18% |
>= 4.0.0, <= 4.1.0.1 | No fix yet |
| GHSA-fx2m-5m9v-jhgp XSS in baserCMS before 4.1.4 |
Medium EPSS 0.73% |
< 4.1.4 | 4.1.4 |
| GHSA-69gw-v5ph-6vxq Code Injection in baserCMS |
High EPSS 1.47% |
<= 3.0.14 | No fix yet |
| GHSA-69gw-v5ph-6vxq Code Injection in baserCMS |
High EPSS 1.47% |
>= 4.0.0, <= 4.0.5 | No fix yet |
| GHSA-jc94-wp59-pq4f baserCMS SQL Injection vulnerability |
Critical EPSS 1.77% |
< 3.0.15 | 3.0.15 |
| GHSA-jc94-wp59-pq4f baserCMS SQL Injection vulnerability |
Critical EPSS 1.77% |
>= 4.0.0, < 4.0.6 | 4.0.6 |
| GHSA-mjj9-33j8-pfwh baserCMS vulnerable to Access Control Bypass |
High EPSS 1.63% |
< 3.0.16 | 3.0.16 |
| GHSA-mjj9-33j8-pfwh baserCMS vulnerable to Access Control Bypass |
High EPSS 1.63% |
>= 4.0.0, < 4.1.1 | 4.1.1 |
| GHSA-33fq-qm4m-cjw3 baserCMS Access Control Bypass |
Medium EPSS 1.12% |
>= 4.0.0, < 4.1.1 | 4.1.1 |
| GHSA-33fq-qm4m-cjw3 baserCMS Access Control Bypass |
Medium EPSS 1.12% |
< 3.0.16 | 3.0.16 |
| GHSA-x73x-7gmx-w835 Arbitrary file delete in baserCMS |
High EPSS 1.42% |
>= 4.0.0, < 4.0.6 | 4.0.6 |
| GHSA-x73x-7gmx-w835 Arbitrary file delete in baserCMS |
High EPSS 1.42% |
< 3.0.15 | 3.0.15 |
| GHSA-397g-4jpj-44xg CSRF in baserCMS 3.0.10 and earlier |
High EPSS 0.88% |
<= 3.0.10 | No fix yet |
| GHSA-rjc2-x53r-6c9r RCE in baserCMS before 4.1.4 |
High EPSS 2.40% |
< 4.1.4 | 4.1.4 |
| GHSA-6wr6-54mw-mvhr BaserCMS privilege escallation |
Medium EPSS 1.34% |
< 1.6.12 | 1.6.12 |
| GHSA-v9gf-98vr-mgp2 baserCMS Access Control Bypass |
Medium EPSS 1.55% |
< 3.0.8 | 3.0.8 |
| GHSA-7rpc-9m88-cf9w OS Command Injection Vulnerability and Potential Zip Slip Vulnerability in baserCMS |
Critical EPSS 2.17% |
< 4.5.4 | 4.5.4 |
| GHSA-4x2f-54wr-4hjg Potential Zip Slip Vulnerability in baserCMS |
High EPSS 1.62% |
< 4.5.4 | 4.5.4 |
| GHSA-hgjr-632x-qpp3 Cross-site scripting vulnerability in file upload |
High EPSS 0.93% |
< 4.5.1 | 4.5.1 |
| GHSA-v9w8-hq92-v39m Cross-site Scripting (XSS) in baserCMS |
Medium EPSS 0.73% |
< 4.4.5 | 4.4.5 |
| GHSA-g39q-f4rm-85x4 OS Command Injection in baserCMS |
High EPSS 2.48% |
< 4.4.5 | 4.4.5 |
| GHSA-24p5-x9f9-vvpx Cross-site Scripting (XSS) in baserCMS |
Medium EPSS 0.73% |
< 4.4.5 | 4.4.5 |
| GHSA-wpww-4jf4-4hx8 Edit feed settings and others, Cross Site Scripting(XSS) Vulnerability in Latest Release 4.4.0 |
High EPSS 1.03% |
>= 4.4.0, < 4.4.1 | 4.4.1 |
| GHSA-fw5q-j9p4-3vxg Blog comment posting, Cross Site Scripting(XSS) Vulnerability in Latest Release 4.4.0 |
High EPSS 1.00% |
>= 4.4.0, < 4.4.1 | 4.4.1 |
| GHSA-6fmv-q269-55cw Edit template, Remote Code Execution (RCE) Vulnerability in Latest Release 4.4.0 |
High EPSS 2.31% |
>= 4.4.0, < 4.4.1 | 4.4.1 |
| GHSA-673x-f5wx-fxpw Cross Site Scripting and RCE in baserCMS |
High EPSS 2.15% |
>= 4.0.0, < 4.3.7 | 4.3.7 |
| GHSA-4r3m-j6x5-48m3 Cross Site Scripting(XSS) Vulnerability in Latest Release 4.3.6 Site basic settings |
High EPSS 1.29% |
>= 4.0.0, < 4.3.7 | 4.3.7 |
| GHSA-cpxc-67rc-c775 Cross Site Scripting in baserCMS |
High EPSS 1.01% |
>= 4.0.0, < 4.3.7 | 4.3.7 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor