Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/baserproject/basercms@3.0.15
Typecomposer
Namespacebaserproject
Namebasercms
Version3.0.15
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version5.2.3
Latest_non_vulnerable_version5.2.3
Affected_by_vulnerabilities
0
url VCID-19n8-vups-cyg8
vulnerability_id VCID-19n8-vups-cyg8
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-20683
reference_id
reference_type
scores
0
value 0.00203
scoring_system epss
scoring_elements 0.4242
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-20683
1
reference_url https://basercms.net/security/JVN64869876
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://basercms.net/security/JVN64869876
2
reference_url https://github.com/baserproject/basercms/commit/88ccc61e5656b05dd13204d61de706efaa2cd0b1
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms/commit/88ccc61e5656b05dd13204d61de706efaa2cd0b1
3
reference_url https://jvn.jp/en/jp/JVN64869876/index.html
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://jvn.jp/en/jp/JVN64869876/index.html
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-20683
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-20683
5
reference_url https://github.com/advisories/GHSA-v9w8-hq92-v39m
reference_id GHSA-v9w8-hq92-v39m
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-v9w8-hq92-v39m
fixed_packages
0
url pkg:composer/baserproject/basercms@4.4.5
purl pkg:composer/baserproject/basercms@4.4.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-2c9a-4k3v-1ydj
2
vulnerability VCID-3btn-6dkf-67aq
3
vulnerability VCID-3jx2-hpuj-afaf
4
vulnerability VCID-46uc-rvvt-5ke8
5
vulnerability VCID-686s-gr1n-4qa9
6
vulnerability VCID-6p1v-g9d1-zfe5
7
vulnerability VCID-6yw8-d6jx-ykcm
8
vulnerability VCID-7rv4-k7qe-vyds
9
vulnerability VCID-ambd-vx8w-y7b5
10
vulnerability VCID-c77m-9mgg-c3ht
11
vulnerability VCID-cknd-kv9u-sfdc
12
vulnerability VCID-cprt-rzws-tkgh
13
vulnerability VCID-cyb9-u781-tkar
14
vulnerability VCID-d1m5-npyb-93ba
15
vulnerability VCID-e1dn-at7q-t7fj
16
vulnerability VCID-e3g3-wbbd-k7fy
17
vulnerability VCID-e7n8-hhe7-5qhp
18
vulnerability VCID-f1qc-b1uy-uycf
19
vulnerability VCID-mkbe-t5bg-a3fz
20
vulnerability VCID-mnc6-6egy-jbhn
21
vulnerability VCID-pfj6-r4pn-wfhf
22
vulnerability VCID-py24-kt42-9kdy
23
vulnerability VCID-qv2s-xgym-v3bv
24
vulnerability VCID-ra7y-cb5e-w7ee
25
vulnerability VCID-tjg8-cmv3-43d8
26
vulnerability VCID-wgd1-9jtr-vfgj
27
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.4.5
aliases CVE-2021-20683, GHSA-v9w8-hq92-v39m
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-19n8-vups-cyg8
1
url VCID-1nef-kbvb-nqgv
vulnerability_id VCID-1nef-kbvb-nqgv
summary baserCMS is a website development framework. Prior to version 5.2.3, baserCMS contains an OS command injection vulnerability in the core update functionality. An authenticated administrator can execute arbitrary OS commands on the server due to improper handling of user-controlled input that is directly passed to exec() without sufficient validation or escaping. This issue has been patched in version 5.2.3.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-21861
reference_id
reference_type
scores
0
value 0.00137
scoring_system epss
scoring_elements 0.33395
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-21861
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-21861
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-21861
3
reference_url https://github.com/baserproject/basercms/releases/tag/5.2.3
reference_id 5.2.3
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-03-31T14:01:36Z/
url https://github.com/baserproject/basercms/releases/tag/5.2.3
4
reference_url https://github.com/advisories/GHSA-qxmc-6f24-g86g
reference_id GHSA-qxmc-6f24-g86g
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qxmc-6f24-g86g
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-qxmc-6f24-g86g
reference_id GHSA-qxmc-6f24-g86g
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-03-31T14:01:36Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-qxmc-6f24-g86g
6
reference_url https://basercms.net/security/JVN_20837860
reference_id JVN_20837860
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-03-31T14:01:36Z/
url https://basercms.net/security/JVN_20837860
fixed_packages
0
url pkg:composer/baserproject/basercms@5.2.3
purl pkg:composer/baserproject/basercms@5.2.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@5.2.3
aliases CVE-2026-21861, GHSA-qxmc-6f24-g86g
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1nef-kbvb-nqgv
2
url VCID-2c9a-4k3v-1ydj
vulnerability_id VCID-2c9a-4k3v-1ydj
summary baserCMS is a Content Management system. Prior to version 4.7.5, any file may be uploaded on the management system of baserCMS. Version 4.7.5 contains a patch.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-25655
reference_id
reference_type
scores
0
value 0.00561
scoring_system epss
scoring_elements 0.68769
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-25655
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-25655
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-25655
3
reference_url https://github.com/baserproject/basercms/commit/922025a98b0e697ab78f6a785a004e0729aa9100
reference_id 922025a98b0e697ab78f6a785a004e0729aa9100
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:30:57Z/
url https://github.com/baserproject/basercms/commit/922025a98b0e697ab78f6a785a004e0729aa9100
4
reference_url https://github.com/baserproject/basercms/commit/9297629983ed908c7f51bf61a0231dde91404ebd
reference_id 9297629983ed908c7f51bf61a0231dde91404ebd
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:30:57Z/
url https://github.com/baserproject/basercms/commit/9297629983ed908c7f51bf61a0231dde91404ebd
5
reference_url https://github.com/baserproject/basercms/releases/tag/basercms-4.7.5
reference_id basercms-4.7.5
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:30:57Z/
url https://github.com/baserproject/basercms/releases/tag/basercms-4.7.5
6
reference_url https://github.com/advisories/GHSA-mfvg-qwcw-qvc8
reference_id GHSA-mfvg-qwcw-qvc8
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mfvg-qwcw-qvc8
7
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-mfvg-qwcw-qvc8
reference_id GHSA-mfvg-qwcw-qvc8
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:30:57Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-mfvg-qwcw-qvc8
fixed_packages
0
url pkg:composer/baserproject/basercms@4.7.5
purl pkg:composer/baserproject/basercms@4.7.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-3btn-6dkf-67aq
2
vulnerability VCID-3pja-sw64-bfcv
3
vulnerability VCID-46uc-rvvt-5ke8
4
vulnerability VCID-686s-gr1n-4qa9
5
vulnerability VCID-6p1v-g9d1-zfe5
6
vulnerability VCID-7rv4-k7qe-vyds
7
vulnerability VCID-c77m-9mgg-c3ht
8
vulnerability VCID-cknd-kv9u-sfdc
9
vulnerability VCID-cprt-rzws-tkgh
10
vulnerability VCID-cyb9-u781-tkar
11
vulnerability VCID-e1dn-at7q-t7fj
12
vulnerability VCID-e7n8-hhe7-5qhp
13
vulnerability VCID-f1qc-b1uy-uycf
14
vulnerability VCID-mkbe-t5bg-a3fz
15
vulnerability VCID-mnc6-6egy-jbhn
16
vulnerability VCID-pfj6-r4pn-wfhf
17
vulnerability VCID-py24-kt42-9kdy
18
vulnerability VCID-qv2s-xgym-v3bv
19
vulnerability VCID-wgd1-9jtr-vfgj
20
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.7.5
aliases CVE-2023-25655, GHSA-mfvg-qwcw-qvc8
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2c9a-4k3v-1ydj
3
url VCID-3btn-6dkf-67aq
vulnerability_id VCID-3btn-6dkf-67aq
summary baserCMS is a website development framework. Prior to version 4.8.0, there is a cross-site scripting vulnerability in the file upload feature of baserCMS. Version 4.8.0 contains a patch for this issue.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-43647
reference_id
reference_type
scores
0
value 0.00572
scoring_system epss
scoring_elements 0.69127
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-43647
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-43647
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-43647
3
reference_url https://github.com/baserproject/basercms/commit/eb5977533d05db4f3bb03bd19630b66052799b2e
reference_id eb5977533d05db4f3bb03bd19630b66052799b2e
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-06T20:12:52Z/
url https://github.com/baserproject/basercms/commit/eb5977533d05db4f3bb03bd19630b66052799b2e
4
reference_url https://github.com/advisories/GHSA-ggj4-78rm-6xgv
reference_id GHSA-ggj4-78rm-6xgv
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-ggj4-78rm-6xgv
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-ggj4-78rm-6xgv
reference_id GHSA-ggj4-78rm-6xgv
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-06T20:12:52Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-ggj4-78rm-6xgv
6
reference_url https://basercms.net/security/JVN_24381990
reference_id JVN_24381990
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-06T20:12:52Z/
url https://basercms.net/security/JVN_24381990
fixed_packages
0
url pkg:composer/baserproject/basercms@4.8.0
purl pkg:composer/baserproject/basercms@4.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-686s-gr1n-4qa9
2
vulnerability VCID-6p1v-g9d1-zfe5
3
vulnerability VCID-c77m-9mgg-c3ht
4
vulnerability VCID-cknd-kv9u-sfdc
5
vulnerability VCID-cprt-rzws-tkgh
6
vulnerability VCID-cyb9-u781-tkar
7
vulnerability VCID-e1dn-at7q-t7fj
8
vulnerability VCID-f1qc-b1uy-uycf
9
vulnerability VCID-mkbe-t5bg-a3fz
10
vulnerability VCID-mnc6-6egy-jbhn
11
vulnerability VCID-pfj6-r4pn-wfhf
12
vulnerability VCID-py24-kt42-9kdy
13
vulnerability VCID-qv2s-xgym-v3bv
14
vulnerability VCID-wgd1-9jtr-vfgj
15
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.8.0
1
url pkg:composer/baserproject/basercms@5.0.0
purl pkg:composer/baserproject/basercms@5.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-686s-gr1n-4qa9
2
vulnerability VCID-6p1v-g9d1-zfe5
3
vulnerability VCID-c77m-9mgg-c3ht
4
vulnerability VCID-cprt-rzws-tkgh
5
vulnerability VCID-cyb9-u781-tkar
6
vulnerability VCID-e1dn-at7q-t7fj
7
vulnerability VCID-f1qc-b1uy-uycf
8
vulnerability VCID-mkbe-t5bg-a3fz
9
vulnerability VCID-mnc6-6egy-jbhn
10
vulnerability VCID-pfj6-r4pn-wfhf
11
vulnerability VCID-py24-kt42-9kdy
12
vulnerability VCID-qv2s-xgym-v3bv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@5.0.0
aliases CVE-2023-43647, GHSA-ggj4-78rm-6xgv
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3btn-6dkf-67aq
4
url VCID-3jx2-hpuj-afaf
vulnerability_id VCID-3jx2-hpuj-afaf
summary baserCMS is a Content Management system. Prior to version 4.7.5, there is a Remote Code Execution (RCE) Vulnerability in the management system of baserCMS. Version 4.7.5 contains a patch.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-25654
reference_id
reference_type
scores
0
value 0.02083
scoring_system epss
scoring_elements 0.84359
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-25654
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-25654
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-25654
3
reference_url https://github.com/baserproject/basercms/commit/002886be0998c74c386e04f0b43688a8a45d7a96
reference_id 002886be0998c74c386e04f0b43688a8a45d7a96
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:31:00Z/
url https://github.com/baserproject/basercms/commit/002886be0998c74c386e04f0b43688a8a45d7a96
4
reference_url https://github.com/baserproject/basercms/commit/08247f0a633d8e836ce2e5cd2d53aa19901a1359
reference_id 08247f0a633d8e836ce2e5cd2d53aa19901a1359
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:31:00Z/
url https://github.com/baserproject/basercms/commit/08247f0a633d8e836ce2e5cd2d53aa19901a1359
5
reference_url https://github.com/baserproject/basercms/commit/60f83054d8131b0ace60716cec7e629b5eb3a8f0
reference_id 60f83054d8131b0ace60716cec7e629b5eb3a8f0
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:31:00Z/
url https://github.com/baserproject/basercms/commit/60f83054d8131b0ace60716cec7e629b5eb3a8f0
6
reference_url https://github.com/baserproject/basercms/releases/tag/basercms-4.7.5
reference_id basercms-4.7.5
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:31:00Z/
url https://github.com/baserproject/basercms/releases/tag/basercms-4.7.5
7
reference_url https://github.com/advisories/GHSA-h4cc-fxpp-pgw9
reference_id GHSA-h4cc-fxpp-pgw9
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-h4cc-fxpp-pgw9
8
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-h4cc-fxpp-pgw9
reference_id GHSA-h4cc-fxpp-pgw9
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:31:00Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-h4cc-fxpp-pgw9
fixed_packages
0
url pkg:composer/baserproject/basercms@4.7.5
purl pkg:composer/baserproject/basercms@4.7.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-3btn-6dkf-67aq
2
vulnerability VCID-3pja-sw64-bfcv
3
vulnerability VCID-46uc-rvvt-5ke8
4
vulnerability VCID-686s-gr1n-4qa9
5
vulnerability VCID-6p1v-g9d1-zfe5
6
vulnerability VCID-7rv4-k7qe-vyds
7
vulnerability VCID-c77m-9mgg-c3ht
8
vulnerability VCID-cknd-kv9u-sfdc
9
vulnerability VCID-cprt-rzws-tkgh
10
vulnerability VCID-cyb9-u781-tkar
11
vulnerability VCID-e1dn-at7q-t7fj
12
vulnerability VCID-e7n8-hhe7-5qhp
13
vulnerability VCID-f1qc-b1uy-uycf
14
vulnerability VCID-mkbe-t5bg-a3fz
15
vulnerability VCID-mnc6-6egy-jbhn
16
vulnerability VCID-pfj6-r4pn-wfhf
17
vulnerability VCID-py24-kt42-9kdy
18
vulnerability VCID-qv2s-xgym-v3bv
19
vulnerability VCID-wgd1-9jtr-vfgj
20
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.7.5
aliases CVE-2023-25654, GHSA-h4cc-fxpp-pgw9
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3jx2-hpuj-afaf
5
url VCID-46uc-rvvt-5ke8
vulnerability_id VCID-46uc-rvvt-5ke8
summary baserCMS is a website development framework. Prior to version 4.8.0, there is a Directory Traversal Vulnerability in the form submission data management feature of baserCMS. Version 4.8.0 contains a patch for this issue.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-43648
reference_id
reference_type
scores
0
value 0.00289
scoring_system epss
scoring_elements 0.52682
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-43648
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-43648
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-43648
3
reference_url https://github.com/baserproject/basercms/commit/7555a5cf0006755dc0223fffc2d882b50a97758b
reference_id 7555a5cf0006755dc0223fffc2d882b50a97758b
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-05T20:22:00Z/
url https://github.com/baserproject/basercms/commit/7555a5cf0006755dc0223fffc2d882b50a97758b
4
reference_url https://github.com/advisories/GHSA-hmqj-gv2m-hq55
reference_id GHSA-hmqj-gv2m-hq55
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hmqj-gv2m-hq55
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-hmqj-gv2m-hq55
reference_id GHSA-hmqj-gv2m-hq55
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
2
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-05T20:22:00Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-hmqj-gv2m-hq55
6
reference_url https://basercms.net/security/JVN_81174674
reference_id JVN_81174674
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-05T20:22:00Z/
url https://basercms.net/security/JVN_81174674
fixed_packages
0
url pkg:composer/baserproject/basercms@4.8.0
purl pkg:composer/baserproject/basercms@4.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-686s-gr1n-4qa9
2
vulnerability VCID-6p1v-g9d1-zfe5
3
vulnerability VCID-c77m-9mgg-c3ht
4
vulnerability VCID-cknd-kv9u-sfdc
5
vulnerability VCID-cprt-rzws-tkgh
6
vulnerability VCID-cyb9-u781-tkar
7
vulnerability VCID-e1dn-at7q-t7fj
8
vulnerability VCID-f1qc-b1uy-uycf
9
vulnerability VCID-mkbe-t5bg-a3fz
10
vulnerability VCID-mnc6-6egy-jbhn
11
vulnerability VCID-pfj6-r4pn-wfhf
12
vulnerability VCID-py24-kt42-9kdy
13
vulnerability VCID-qv2s-xgym-v3bv
14
vulnerability VCID-wgd1-9jtr-vfgj
15
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.8.0
1
url pkg:composer/baserproject/basercms@5.0.0
purl pkg:composer/baserproject/basercms@5.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-686s-gr1n-4qa9
2
vulnerability VCID-6p1v-g9d1-zfe5
3
vulnerability VCID-c77m-9mgg-c3ht
4
vulnerability VCID-cprt-rzws-tkgh
5
vulnerability VCID-cyb9-u781-tkar
6
vulnerability VCID-e1dn-at7q-t7fj
7
vulnerability VCID-f1qc-b1uy-uycf
8
vulnerability VCID-mkbe-t5bg-a3fz
9
vulnerability VCID-mnc6-6egy-jbhn
10
vulnerability VCID-pfj6-r4pn-wfhf
11
vulnerability VCID-py24-kt42-9kdy
12
vulnerability VCID-qv2s-xgym-v3bv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@5.0.0
aliases CVE-2023-43648, GHSA-hmqj-gv2m-hq55
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-46uc-rvvt-5ke8
6
url VCID-686s-gr1n-4qa9
vulnerability_id VCID-686s-gr1n-4qa9
summary baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in HTTP 400 Bad Request. Version 5.1.2 fixes this issue.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-46995
reference_id
reference_type
scores
0
value 0.0087
scoring_system epss
scoring_elements 0.75633
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-46995
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-46995
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-46995
3
reference_url https://github.com/advisories/GHSA-mr7q-fv7j-jcgv
reference_id GHSA-mr7q-fv7j-jcgv
reference_type
scores
url https://github.com/advisories/GHSA-mr7q-fv7j-jcgv
4
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-mr7q-fv7j-jcgv
reference_id GHSA-mr7q-fv7j-jcgv
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-24T19:23:15Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-mr7q-fv7j-jcgv
5
reference_url https://basercms.net/security/JVN_06274755
reference_id JVN_06274755
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-24T19:23:15Z/
url https://basercms.net/security/JVN_06274755
fixed_packages
0
url pkg:composer/baserproject/basercms@5.1.2
purl pkg:composer/baserproject/basercms@5.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-6p1v-g9d1-zfe5
2
vulnerability VCID-cprt-rzws-tkgh
3
vulnerability VCID-cyb9-u781-tkar
4
vulnerability VCID-e1dn-at7q-t7fj
5
vulnerability VCID-f1qc-b1uy-uycf
6
vulnerability VCID-mkbe-t5bg-a3fz
7
vulnerability VCID-mnc6-6egy-jbhn
8
vulnerability VCID-py24-kt42-9kdy
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@5.1.2
aliases CVE-2024-46995, GHSA-mr7q-fv7j-jcgv
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-686s-gr1n-4qa9
7
url VCID-6p1v-g9d1-zfe5
vulnerability_id VCID-6p1v-g9d1-zfe5
summary baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has an OS command injection vulnerability in the installer. This issue has been patched in version 5.2.3.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-30880
reference_id
reference_type
scores
0
value 0.00057
scoring_system epss
scoring_elements 0.18231
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-30880
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-30880
reference_id
reference_type
scores
0
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-30880
3
reference_url https://github.com/baserproject/basercms/releases/tag/5.2.3
reference_id 5.2.3
reference_type
scores
0
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-31T15:27:05Z/
url https://github.com/baserproject/basercms/releases/tag/5.2.3
4
reference_url https://github.com/advisories/GHSA-6hpg-8rx3-cwgv
reference_id GHSA-6hpg-8rx3-cwgv
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6hpg-8rx3-cwgv
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-6hpg-8rx3-cwgv
reference_id GHSA-6hpg-8rx3-cwgv
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-31T15:27:05Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-6hpg-8rx3-cwgv
6
reference_url https://basercms.net/security/JVN_20837860
reference_id JVN_20837860
reference_type
scores
0
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-31T15:27:05Z/
url https://basercms.net/security/JVN_20837860
fixed_packages
0
url pkg:composer/baserproject/basercms@5.2.3
purl pkg:composer/baserproject/basercms@5.2.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@5.2.3
aliases CVE-2026-30880, GHSA-6hpg-8rx3-cwgv
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6p1v-g9d1-zfe5
8
url VCID-6yw8-d6jx-ykcm
vulnerability_id VCID-6yw8-d6jx-ykcm
summary Potential Zip Slip Vulnerability in baserCMS
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-41279
reference_id
reference_type
scores
0
value 0.00438
scoring_system epss
scoring_elements 0.6356
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-41279
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://github.com/baserproject/basercms/commit/d8ab0a81a7bce35cc95ff7dff851a7e87a084336
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms/commit/d8ab0a81a7bce35cc95ff7dff851a7e87a084336
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41279
reference_id CVE-2021-41279
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-41279
4
reference_url https://github.com/advisories/GHSA-4x2f-54wr-4hjg
reference_id GHSA-4x2f-54wr-4hjg
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4x2f-54wr-4hjg
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-4x2f-54wr-4hjg
reference_id GHSA-4x2f-54wr-4hjg
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms/security/advisories/GHSA-4x2f-54wr-4hjg
fixed_packages
0
url pkg:composer/baserproject/basercms@4.5.4
purl pkg:composer/baserproject/basercms@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-2c9a-4k3v-1ydj
2
vulnerability VCID-3btn-6dkf-67aq
3
vulnerability VCID-3jx2-hpuj-afaf
4
vulnerability VCID-46uc-rvvt-5ke8
5
vulnerability VCID-686s-gr1n-4qa9
6
vulnerability VCID-6p1v-g9d1-zfe5
7
vulnerability VCID-7rv4-k7qe-vyds
8
vulnerability VCID-ambd-vx8w-y7b5
9
vulnerability VCID-c77m-9mgg-c3ht
10
vulnerability VCID-cknd-kv9u-sfdc
11
vulnerability VCID-cprt-rzws-tkgh
12
vulnerability VCID-cyb9-u781-tkar
13
vulnerability VCID-d1m5-npyb-93ba
14
vulnerability VCID-e1dn-at7q-t7fj
15
vulnerability VCID-e3g3-wbbd-k7fy
16
vulnerability VCID-e7n8-hhe7-5qhp
17
vulnerability VCID-f1qc-b1uy-uycf
18
vulnerability VCID-mkbe-t5bg-a3fz
19
vulnerability VCID-mnc6-6egy-jbhn
20
vulnerability VCID-pfj6-r4pn-wfhf
21
vulnerability VCID-py24-kt42-9kdy
22
vulnerability VCID-qv2s-xgym-v3bv
23
vulnerability VCID-wgd1-9jtr-vfgj
24
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.5.4
aliases CVE-2021-41279, GHSA-4x2f-54wr-4hjg
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6yw8-d6jx-ykcm
9
url VCID-7qsb-z8v2-zkhz
vulnerability_id VCID-7qsb-z8v2-zkhz
summary
references
0
reference_url http://jvn.jp/en/jp/JVN67881316/index.html
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://jvn.jp/en/jp/JVN67881316/index.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-0570
reference_id
reference_type
scores
0
value 0.00195
scoring_system epss
scoring_elements 0.41322
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-0570
2
reference_url https://basercms.net/security/JVN67881316
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://basercms.net/security/JVN67881316
3
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-0570
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-0570
fixed_packages
0
url pkg:composer/baserproject/basercms@3.0.16
purl pkg:composer/baserproject/basercms@3.0.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7rv4-k7qe-vyds
10
vulnerability VCID-ambd-vx8w-y7b5
11
vulnerability VCID-c77m-9mgg-c3ht
12
vulnerability VCID-cknd-kv9u-sfdc
13
vulnerability VCID-cprt-rzws-tkgh
14
vulnerability VCID-cyb9-u781-tkar
15
vulnerability VCID-d1m5-npyb-93ba
16
vulnerability VCID-dfqh-8ekp-wbdz
17
vulnerability VCID-e1dn-at7q-t7fj
18
vulnerability VCID-e3g3-wbbd-k7fy
19
vulnerability VCID-e7n8-hhe7-5qhp
20
vulnerability VCID-f1qc-b1uy-uycf
21
vulnerability VCID-fw67-k8ej-57bf
22
vulnerability VCID-m3jy-vamm-7qgq
23
vulnerability VCID-mkbe-t5bg-a3fz
24
vulnerability VCID-mnc6-6egy-jbhn
25
vulnerability VCID-pfj6-r4pn-wfhf
26
vulnerability VCID-py24-kt42-9kdy
27
vulnerability VCID-qk6g-muqe-hqfr
28
vulnerability VCID-qv2s-xgym-v3bv
29
vulnerability VCID-ra7y-cb5e-w7ee
30
vulnerability VCID-tjg8-cmv3-43d8
31
vulnerability VCID-upvv-xbqd-9bcz
32
vulnerability VCID-vmf1-uj3x-5yg4
33
vulnerability VCID-vncw-7kq5-rkfj
34
vulnerability VCID-wgd1-9jtr-vfgj
35
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@3.0.16
1
url pkg:composer/baserproject/basercms@4.1.1
purl pkg:composer/baserproject/basercms@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7rv4-k7qe-vyds
10
vulnerability VCID-ambd-vx8w-y7b5
11
vulnerability VCID-c77m-9mgg-c3ht
12
vulnerability VCID-cknd-kv9u-sfdc
13
vulnerability VCID-cprt-rzws-tkgh
14
vulnerability VCID-cyb9-u781-tkar
15
vulnerability VCID-d1m5-npyb-93ba
16
vulnerability VCID-dfqh-8ekp-wbdz
17
vulnerability VCID-e1dn-at7q-t7fj
18
vulnerability VCID-e3g3-wbbd-k7fy
19
vulnerability VCID-e7n8-hhe7-5qhp
20
vulnerability VCID-f1qc-b1uy-uycf
21
vulnerability VCID-fw67-k8ej-57bf
22
vulnerability VCID-gfx3-at47-u7aq
23
vulnerability VCID-m3jy-vamm-7qgq
24
vulnerability VCID-mkbe-t5bg-a3fz
25
vulnerability VCID-mnc6-6egy-jbhn
26
vulnerability VCID-pfj6-r4pn-wfhf
27
vulnerability VCID-py24-kt42-9kdy
28
vulnerability VCID-qk6g-muqe-hqfr
29
vulnerability VCID-qv2s-xgym-v3bv
30
vulnerability VCID-ra7y-cb5e-w7ee
31
vulnerability VCID-tf16-deep-v3bs
32
vulnerability VCID-tjg8-cmv3-43d8
33
vulnerability VCID-upvv-xbqd-9bcz
34
vulnerability VCID-vmf1-uj3x-5yg4
35
vulnerability VCID-vncw-7kq5-rkfj
36
vulnerability VCID-wgd1-9jtr-vfgj
37
vulnerability VCID-ygym-64en-vbav
38
vulnerability VCID-zvaq-2qbe-myhg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.1.1
aliases CVE-2018-0570, GHSA-994g-74gq-5qpr
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7qsb-z8v2-zkhz
10
url VCID-7rv4-k7qe-vyds
vulnerability_id VCID-7rv4-k7qe-vyds
summary baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS. This issue has been patched in version 4.8.0.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-29009
reference_id
reference_type
scores
0
value 0.0055
scoring_system epss
scoring_elements 0.6842
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-29009
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://github.com/baserproject/basercms/commit/919c3ccbbd7a2432967dcb2e428131cc7ad71bb2
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms/commit/919c3ccbbd7a2432967dcb2e428131cc7ad71bb2
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-29009
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-29009
4
reference_url https://github.com/baserproject/basercms/releases/tag/basercms-4.8.0
reference_id basercms-4.8.0
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-09T14:59:04Z/
url https://github.com/baserproject/basercms/releases/tag/basercms-4.8.0
5
reference_url https://github.com/advisories/GHSA-8vqx-prq4-rqrq
reference_id GHSA-8vqx-prq4-rqrq
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8vqx-prq4-rqrq
6
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-8vqx-prq4-rqrq
reference_id GHSA-8vqx-prq4-rqrq
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-09T14:59:04Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-8vqx-prq4-rqrq
7
reference_url https://basercms.net/security/JVN_45547161
reference_id JVN_45547161
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-09T14:59:04Z/
url https://basercms.net/security/JVN_45547161
fixed_packages
0
url pkg:composer/baserproject/basercms@4.8.0
purl pkg:composer/baserproject/basercms@4.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-686s-gr1n-4qa9
2
vulnerability VCID-6p1v-g9d1-zfe5
3
vulnerability VCID-c77m-9mgg-c3ht
4
vulnerability VCID-cknd-kv9u-sfdc
5
vulnerability VCID-cprt-rzws-tkgh
6
vulnerability VCID-cyb9-u781-tkar
7
vulnerability VCID-e1dn-at7q-t7fj
8
vulnerability VCID-f1qc-b1uy-uycf
9
vulnerability VCID-mkbe-t5bg-a3fz
10
vulnerability VCID-mnc6-6egy-jbhn
11
vulnerability VCID-pfj6-r4pn-wfhf
12
vulnerability VCID-py24-kt42-9kdy
13
vulnerability VCID-qv2s-xgym-v3bv
14
vulnerability VCID-wgd1-9jtr-vfgj
15
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.8.0
1
url pkg:composer/baserproject/basercms@5.0.0-beta1
purl pkg:composer/baserproject/basercms@5.0.0-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-686s-gr1n-4qa9
2
vulnerability VCID-6p1v-g9d1-zfe5
3
vulnerability VCID-c77m-9mgg-c3ht
4
vulnerability VCID-cknd-kv9u-sfdc
5
vulnerability VCID-cprt-rzws-tkgh
6
vulnerability VCID-cyb9-u781-tkar
7
vulnerability VCID-e1dn-at7q-t7fj
8
vulnerability VCID-f1qc-b1uy-uycf
9
vulnerability VCID-mkbe-t5bg-a3fz
10
vulnerability VCID-mnc6-6egy-jbhn
11
vulnerability VCID-pfj6-r4pn-wfhf
12
vulnerability VCID-py24-kt42-9kdy
13
vulnerability VCID-qv2s-xgym-v3bv
14
vulnerability VCID-wgd1-9jtr-vfgj
15
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@5.0.0-beta1
aliases CVE-2023-29009, GHSA-8vqx-prq4-rqrq
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7rv4-k7qe-vyds
11
url VCID-9hcb-zk3c-puga
vulnerability_id VCID-9hcb-zk3c-puga
summary
references
0
reference_url http://jvn.jp/en/jp/JVN67881316/index.html
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://jvn.jp/en/jp/JVN67881316/index.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-0572
reference_id
reference_type
scores
0
value 0.00193
scoring_system epss
scoring_elements 0.41144
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-0572
2
reference_url https://basercms.net/security/JVN67881316
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://basercms.net/security/JVN67881316
3
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-0572
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-0572
fixed_packages
0
url pkg:composer/baserproject/basercms@3.0.16
purl pkg:composer/baserproject/basercms@3.0.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7rv4-k7qe-vyds
10
vulnerability VCID-ambd-vx8w-y7b5
11
vulnerability VCID-c77m-9mgg-c3ht
12
vulnerability VCID-cknd-kv9u-sfdc
13
vulnerability VCID-cprt-rzws-tkgh
14
vulnerability VCID-cyb9-u781-tkar
15
vulnerability VCID-d1m5-npyb-93ba
16
vulnerability VCID-dfqh-8ekp-wbdz
17
vulnerability VCID-e1dn-at7q-t7fj
18
vulnerability VCID-e3g3-wbbd-k7fy
19
vulnerability VCID-e7n8-hhe7-5qhp
20
vulnerability VCID-f1qc-b1uy-uycf
21
vulnerability VCID-fw67-k8ej-57bf
22
vulnerability VCID-m3jy-vamm-7qgq
23
vulnerability VCID-mkbe-t5bg-a3fz
24
vulnerability VCID-mnc6-6egy-jbhn
25
vulnerability VCID-pfj6-r4pn-wfhf
26
vulnerability VCID-py24-kt42-9kdy
27
vulnerability VCID-qk6g-muqe-hqfr
28
vulnerability VCID-qv2s-xgym-v3bv
29
vulnerability VCID-ra7y-cb5e-w7ee
30
vulnerability VCID-tjg8-cmv3-43d8
31
vulnerability VCID-upvv-xbqd-9bcz
32
vulnerability VCID-vmf1-uj3x-5yg4
33
vulnerability VCID-vncw-7kq5-rkfj
34
vulnerability VCID-wgd1-9jtr-vfgj
35
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@3.0.16
1
url pkg:composer/baserproject/basercms@4.1.1
purl pkg:composer/baserproject/basercms@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7rv4-k7qe-vyds
10
vulnerability VCID-ambd-vx8w-y7b5
11
vulnerability VCID-c77m-9mgg-c3ht
12
vulnerability VCID-cknd-kv9u-sfdc
13
vulnerability VCID-cprt-rzws-tkgh
14
vulnerability VCID-cyb9-u781-tkar
15
vulnerability VCID-d1m5-npyb-93ba
16
vulnerability VCID-dfqh-8ekp-wbdz
17
vulnerability VCID-e1dn-at7q-t7fj
18
vulnerability VCID-e3g3-wbbd-k7fy
19
vulnerability VCID-e7n8-hhe7-5qhp
20
vulnerability VCID-f1qc-b1uy-uycf
21
vulnerability VCID-fw67-k8ej-57bf
22
vulnerability VCID-gfx3-at47-u7aq
23
vulnerability VCID-m3jy-vamm-7qgq
24
vulnerability VCID-mkbe-t5bg-a3fz
25
vulnerability VCID-mnc6-6egy-jbhn
26
vulnerability VCID-pfj6-r4pn-wfhf
27
vulnerability VCID-py24-kt42-9kdy
28
vulnerability VCID-qk6g-muqe-hqfr
29
vulnerability VCID-qv2s-xgym-v3bv
30
vulnerability VCID-ra7y-cb5e-w7ee
31
vulnerability VCID-tf16-deep-v3bs
32
vulnerability VCID-tjg8-cmv3-43d8
33
vulnerability VCID-upvv-xbqd-9bcz
34
vulnerability VCID-vmf1-uj3x-5yg4
35
vulnerability VCID-vncw-7kq5-rkfj
36
vulnerability VCID-wgd1-9jtr-vfgj
37
vulnerability VCID-ygym-64en-vbav
38
vulnerability VCID-zvaq-2qbe-myhg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.1.1
aliases CVE-2018-0572, GHSA-mjj9-33j8-pfwh
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9hcb-zk3c-puga
12
url VCID-ambd-vx8w-y7b5
vulnerability_id VCID-ambd-vx8w-y7b5
summary BaserCMS is a content management system with a japanese language focus. In affected versions there is a cross-site scripting vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. Users of baserCMS are advised to upgrade as soon as possible. There are no known workarounds for this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-39325
reference_id
reference_type
scores
0
value 0.00687
scoring_system epss
scoring_elements 0.72214
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-39325
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://github.com/baserproject/basercms/releases/tag/basercms-4.7.2
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms/releases/tag/basercms-4.7.2
3
reference_url https://github.com/baserproject/basercms/commit/b6f8a54e90dee51317eddf517b776fe8b4cd3ef6
reference_id b6f8a54e90dee51317eddf517b776fe8b4cd3ef6
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:54:00Z/
url https://github.com/baserproject/basercms/commit/b6f8a54e90dee51317eddf517b776fe8b4cd3ef6
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-39325
reference_id CVE-2022-39325
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-39325
5
reference_url https://github.com/advisories/GHSA-395x-wv32-44v5
reference_id GHSA-395x-wv32-44v5
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-395x-wv32-44v5
6
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-395x-wv32-44v5
reference_id GHSA-395x-wv32-44v5
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:54:00Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-395x-wv32-44v5
7
reference_url https://basercms.net/security/JVN_53682526
reference_id JVN_53682526
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:54:00Z/
url https://basercms.net/security/JVN_53682526
fixed_packages
0
url pkg:composer/baserproject/basercms@4.7.2
purl pkg:composer/baserproject/basercms@4.7.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-2c9a-4k3v-1ydj
2
vulnerability VCID-3btn-6dkf-67aq
3
vulnerability VCID-3jx2-hpuj-afaf
4
vulnerability VCID-3pja-sw64-bfcv
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-7rv4-k7qe-vyds
9
vulnerability VCID-c77m-9mgg-c3ht
10
vulnerability VCID-cknd-kv9u-sfdc
11
vulnerability VCID-cprt-rzws-tkgh
12
vulnerability VCID-cyb9-u781-tkar
13
vulnerability VCID-e1dn-at7q-t7fj
14
vulnerability VCID-e7n8-hhe7-5qhp
15
vulnerability VCID-f1qc-b1uy-uycf
16
vulnerability VCID-mkbe-t5bg-a3fz
17
vulnerability VCID-mnc6-6egy-jbhn
18
vulnerability VCID-pfj6-r4pn-wfhf
19
vulnerability VCID-py24-kt42-9kdy
20
vulnerability VCID-qv2s-xgym-v3bv
21
vulnerability VCID-wgd1-9jtr-vfgj
22
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.7.2
aliases CVE-2022-39325, GHSA-395x-wv32-44v5
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ambd-vx8w-y7b5
13
url VCID-c77m-9mgg-c3ht
vulnerability_id VCID-c77m-9mgg-c3ht
summary baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Blog posts feature. Version 5.1.2 fixes this issue.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-46996
reference_id
reference_type
scores
0
value 0.01236
scoring_system epss
scoring_elements 0.79626
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-46996
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
1
value 5.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-46996
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
1
value 5.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-46996
3
reference_url https://github.com/advisories/GHSA-66jv-qrm3-vvfg
reference_id GHSA-66jv-qrm3-vvfg
reference_type
scores
url https://github.com/advisories/GHSA-66jv-qrm3-vvfg
4
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-66jv-qrm3-vvfg
reference_id GHSA-66jv-qrm3-vvfg
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
1
value 5.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-24T19:22:34Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-66jv-qrm3-vvfg
5
reference_url https://basercms.net/security/JVN_00876083
reference_id JVN_00876083
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
1
value 5.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-24T19:22:34Z/
url https://basercms.net/security/JVN_00876083
fixed_packages
0
url pkg:composer/baserproject/basercms@5.1.2
purl pkg:composer/baserproject/basercms@5.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-6p1v-g9d1-zfe5
2
vulnerability VCID-cprt-rzws-tkgh
3
vulnerability VCID-cyb9-u781-tkar
4
vulnerability VCID-e1dn-at7q-t7fj
5
vulnerability VCID-f1qc-b1uy-uycf
6
vulnerability VCID-mkbe-t5bg-a3fz
7
vulnerability VCID-mnc6-6egy-jbhn
8
vulnerability VCID-py24-kt42-9kdy
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@5.1.2
aliases CVE-2024-46996, GHSA-66jv-qrm3-vvfg
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c77m-9mgg-c3ht
14
url VCID-cknd-kv9u-sfdc
vulnerability_id VCID-cknd-kv9u-sfdc
summary baserCMS is a website development framework. Prior to version 5.0.9, there is an OS Command Injection vulnerability in the site search feature of baserCMS. Version 5.0.9 contains a fix for this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-51450
reference_id
reference_type
scores
0
value 0.00755
scoring_system epss
scoring_elements 0.73698
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-51450
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 5.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://github.com/baserproject/basercms/commit/18f426d63e752b4d22c40e9ea8d1f6e692ef601c
reference_id 18f426d63e752b4d22c40e9ea8d1f6e692ef601c
reference_type
scores
0
value 5.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-22T16:32:12Z/
url https://github.com/baserproject/basercms/commit/18f426d63e752b4d22c40e9ea8d1f6e692ef601c
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-51450
reference_id CVE-2023-51450
reference_type
scores
0
value 5.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-51450
4
reference_url https://github.com/advisories/GHSA-77fc-4cv5-hmfr
reference_id GHSA-77fc-4cv5-hmfr
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-77fc-4cv5-hmfr
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-77fc-4cv5-hmfr
reference_id GHSA-77fc-4cv5-hmfr
reference_type
scores
0
value 5.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-22T16:32:12Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-77fc-4cv5-hmfr
6
reference_url https://basercms.net/security/JVN_09767360
reference_id JVN_09767360
reference_type
scores
0
value 5.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-22T16:32:12Z/
url https://basercms.net/security/JVN_09767360
fixed_packages
0
url pkg:composer/baserproject/basercms@5.0.9
purl pkg:composer/baserproject/basercms@5.0.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-686s-gr1n-4qa9
2
vulnerability VCID-6p1v-g9d1-zfe5
3
vulnerability VCID-c77m-9mgg-c3ht
4
vulnerability VCID-cprt-rzws-tkgh
5
vulnerability VCID-cyb9-u781-tkar
6
vulnerability VCID-e1dn-at7q-t7fj
7
vulnerability VCID-f1qc-b1uy-uycf
8
vulnerability VCID-mkbe-t5bg-a3fz
9
vulnerability VCID-mnc6-6egy-jbhn
10
vulnerability VCID-pfj6-r4pn-wfhf
11
vulnerability VCID-py24-kt42-9kdy
12
vulnerability VCID-qv2s-xgym-v3bv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@5.0.9
aliases CVE-2023-51450, GHSA-77fc-4cv5-hmfr
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cknd-kv9u-sfdc
15
url VCID-cprt-rzws-tkgh
vulnerability_id VCID-cprt-rzws-tkgh
summary baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has DOM-based cross-site scripting in tag creation. This issue has been patched in version 5.2.3.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-32734
reference_id
reference_type
scores
0
value 0.00013
scoring_system epss
scoring_elements 0.02278
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-32734
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-32734
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-32734
3
reference_url https://github.com/baserproject/basercms/releases/tag/5.2.3
reference_id 5.2.3
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-31T18:50:30Z/
url https://github.com/baserproject/basercms/releases/tag/5.2.3
4
reference_url https://github.com/advisories/GHSA-677c-xv24-crgx
reference_id GHSA-677c-xv24-crgx
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-677c-xv24-crgx
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-677c-xv24-crgx
reference_id GHSA-677c-xv24-crgx
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-31T18:50:30Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-677c-xv24-crgx
6
reference_url https://basercms.net/security/JVN_20837860
reference_id JVN_20837860
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-31T18:50:30Z/
url https://basercms.net/security/JVN_20837860
fixed_packages
0
url pkg:composer/baserproject/basercms@5.2.3
purl pkg:composer/baserproject/basercms@5.2.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@5.2.3
aliases CVE-2026-32734, GHSA-677c-xv24-crgx
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cprt-rzws-tkgh
16
url VCID-cyb9-u781-tkar
vulnerability_id VCID-cyb9-u781-tkar
summary baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a SQL injection vulnerability in blog posts. This issue has been patched in version 5.2.3.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-27697
reference_id
reference_type
scores
0
value 0.00013
scoring_system epss
scoring_elements 0.02322
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-27697
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-27697
reference_id
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-27697
3
reference_url https://github.com/baserproject/basercms/releases/tag/5.2.3
reference_id 5.2.3
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-31T15:27:51Z/
url https://github.com/baserproject/basercms/releases/tag/5.2.3
4
reference_url https://github.com/advisories/GHSA-vh89-rjph-2g7p
reference_id GHSA-vh89-rjph-2g7p
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vh89-rjph-2g7p
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-vh89-rjph-2g7p
reference_id GHSA-vh89-rjph-2g7p
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-31T15:27:51Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-vh89-rjph-2g7p
6
reference_url https://basercms.net/security/JVN_20837860
reference_id JVN_20837860
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-31T15:27:51Z/
url https://basercms.net/security/JVN_20837860
fixed_packages
0
url pkg:composer/baserproject/basercms@5.2.3
purl pkg:composer/baserproject/basercms@5.2.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@5.2.3
aliases CVE-2026-27697, GHSA-vh89-rjph-2g7p
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cyb9-u781-tkar
17
url VCID-d1m5-npyb-93ba
vulnerability_id VCID-d1m5-npyb-93ba
summary Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-41994
reference_id
reference_type
scores
0
value 0.00143
scoring_system epss
scoring_elements 0.34412
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-41994
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-41994
reference_id CVE-2022-41994
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-41994
3
reference_url https://github.com/advisories/GHSA-vxwf-79ch-f7f7
reference_id GHSA-vxwf-79ch-f7f7
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vxwf-79ch-f7f7
4
reference_url https://jvn.jp/en/jp/JVN53682526/index.html
reference_id index.html
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:27:38Z/
url https://jvn.jp/en/jp/JVN53682526/index.html
5
reference_url https://basercms.net/security/JVN_53682526
reference_id JVN_53682526
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:27:38Z/
url https://basercms.net/security/JVN_53682526
fixed_packages
0
url pkg:composer/baserproject/basercms@4.7.2
purl pkg:composer/baserproject/basercms@4.7.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-2c9a-4k3v-1ydj
2
vulnerability VCID-3btn-6dkf-67aq
3
vulnerability VCID-3jx2-hpuj-afaf
4
vulnerability VCID-3pja-sw64-bfcv
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-7rv4-k7qe-vyds
9
vulnerability VCID-c77m-9mgg-c3ht
10
vulnerability VCID-cknd-kv9u-sfdc
11
vulnerability VCID-cprt-rzws-tkgh
12
vulnerability VCID-cyb9-u781-tkar
13
vulnerability VCID-e1dn-at7q-t7fj
14
vulnerability VCID-e7n8-hhe7-5qhp
15
vulnerability VCID-f1qc-b1uy-uycf
16
vulnerability VCID-mkbe-t5bg-a3fz
17
vulnerability VCID-mnc6-6egy-jbhn
18
vulnerability VCID-pfj6-r4pn-wfhf
19
vulnerability VCID-py24-kt42-9kdy
20
vulnerability VCID-qv2s-xgym-v3bv
21
vulnerability VCID-wgd1-9jtr-vfgj
22
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.7.2
aliases CVE-2022-41994, GHSA-vxwf-79ch-f7f7
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d1m5-npyb-93ba
18
url VCID-dfqh-8ekp-wbdz
vulnerability_id VCID-dfqh-8ekp-wbdz
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-20682
reference_id
reference_type
scores
0
value 0.02357
scoring_system epss
scoring_elements 0.85264
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-20682
1
reference_url https://basercms.net/security/JVN64869876
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://basercms.net/security/JVN64869876
2
reference_url https://jvn.jp/en/jp/JVN64869876/index.html
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://jvn.jp/en/jp/JVN64869876/index.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-20682
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-20682
4
reference_url https://github.com/advisories/GHSA-g39q-f4rm-85x4
reference_id GHSA-g39q-f4rm-85x4
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-g39q-f4rm-85x4
fixed_packages
0
url pkg:composer/baserproject/basercms@4.4.5
purl pkg:composer/baserproject/basercms@4.4.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-2c9a-4k3v-1ydj
2
vulnerability VCID-3btn-6dkf-67aq
3
vulnerability VCID-3jx2-hpuj-afaf
4
vulnerability VCID-46uc-rvvt-5ke8
5
vulnerability VCID-686s-gr1n-4qa9
6
vulnerability VCID-6p1v-g9d1-zfe5
7
vulnerability VCID-6yw8-d6jx-ykcm
8
vulnerability VCID-7rv4-k7qe-vyds
9
vulnerability VCID-ambd-vx8w-y7b5
10
vulnerability VCID-c77m-9mgg-c3ht
11
vulnerability VCID-cknd-kv9u-sfdc
12
vulnerability VCID-cprt-rzws-tkgh
13
vulnerability VCID-cyb9-u781-tkar
14
vulnerability VCID-d1m5-npyb-93ba
15
vulnerability VCID-e1dn-at7q-t7fj
16
vulnerability VCID-e3g3-wbbd-k7fy
17
vulnerability VCID-e7n8-hhe7-5qhp
18
vulnerability VCID-f1qc-b1uy-uycf
19
vulnerability VCID-mkbe-t5bg-a3fz
20
vulnerability VCID-mnc6-6egy-jbhn
21
vulnerability VCID-pfj6-r4pn-wfhf
22
vulnerability VCID-py24-kt42-9kdy
23
vulnerability VCID-qv2s-xgym-v3bv
24
vulnerability VCID-ra7y-cb5e-w7ee
25
vulnerability VCID-tjg8-cmv3-43d8
26
vulnerability VCID-wgd1-9jtr-vfgj
27
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.4.5
aliases CVE-2021-20682, GHSA-g39q-f4rm-85x4
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dfqh-8ekp-wbdz
19
url VCID-e1dn-at7q-t7fj
vulnerability_id VCID-e1dn-at7q-t7fj
summary baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a cross-site scripting vulnerability in blog posts. This issue has been patched in version 5.2.3.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-30879
reference_id
reference_type
scores
0
value 0.00013
scoring_system epss
scoring_elements 0.02278
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-30879
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-30879
reference_id
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-30879
3
reference_url https://github.com/baserproject/basercms/releases/tag/5.2.3
reference_id 5.2.3
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-31T14:00:24Z/
url https://github.com/baserproject/basercms/releases/tag/5.2.3
4
reference_url https://github.com/advisories/GHSA-jmq3-x8q7-j9qm
reference_id GHSA-jmq3-x8q7-j9qm
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-jmq3-x8q7-j9qm
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-jmq3-x8q7-j9qm
reference_id GHSA-jmq3-x8q7-j9qm
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-31T14:00:24Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-jmq3-x8q7-j9qm
6
reference_url https://basercms.net/security/JVN_20837860
reference_id JVN_20837860
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-31T14:00:24Z/
url https://basercms.net/security/JVN_20837860
fixed_packages
0
url pkg:composer/baserproject/basercms@5.2.3
purl pkg:composer/baserproject/basercms@5.2.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@5.2.3
aliases CVE-2026-30879, GHSA-jmq3-x8q7-j9qm
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e1dn-at7q-t7fj
20
url VCID-e3g3-wbbd-k7fy
vulnerability_id VCID-e3g3-wbbd-k7fy
summary Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-42486
reference_id
reference_type
scores
0
value 0.00144
scoring_system epss
scoring_elements 0.34552
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-42486
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-42486
reference_id CVE-2022-42486
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-42486
3
reference_url https://github.com/advisories/GHSA-7w2v-35j3-xrm9
reference_id GHSA-7w2v-35j3-xrm9
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7w2v-35j3-xrm9
4
reference_url https://jvn.jp/en/jp/JVN53682526/index.html
reference_id index.html
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T16:01:40Z/
url https://jvn.jp/en/jp/JVN53682526/index.html
5
reference_url https://basercms.net/security/JVN_53682526
reference_id JVN_53682526
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T16:01:40Z/
url https://basercms.net/security/JVN_53682526
fixed_packages
0
url pkg:composer/baserproject/basercms@4.7.2
purl pkg:composer/baserproject/basercms@4.7.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-2c9a-4k3v-1ydj
2
vulnerability VCID-3btn-6dkf-67aq
3
vulnerability VCID-3jx2-hpuj-afaf
4
vulnerability VCID-3pja-sw64-bfcv
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-7rv4-k7qe-vyds
9
vulnerability VCID-c77m-9mgg-c3ht
10
vulnerability VCID-cknd-kv9u-sfdc
11
vulnerability VCID-cprt-rzws-tkgh
12
vulnerability VCID-cyb9-u781-tkar
13
vulnerability VCID-e1dn-at7q-t7fj
14
vulnerability VCID-e7n8-hhe7-5qhp
15
vulnerability VCID-f1qc-b1uy-uycf
16
vulnerability VCID-mkbe-t5bg-a3fz
17
vulnerability VCID-mnc6-6egy-jbhn
18
vulnerability VCID-pfj6-r4pn-wfhf
19
vulnerability VCID-py24-kt42-9kdy
20
vulnerability VCID-qv2s-xgym-v3bv
21
vulnerability VCID-wgd1-9jtr-vfgj
22
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.7.2
aliases CVE-2022-42486, GHSA-7w2v-35j3-xrm9
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e3g3-wbbd-k7fy
21
url VCID-e7n8-hhe7-5qhp
vulnerability_id VCID-e7n8-hhe7-5qhp
summary baserCMS is a website development framework. Prior to version 4.8.0, there is a cross site request forgery vulnerability in the content preview feature of baserCMS. Version 4.8.0 contains a patch for this issue.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-43649
reference_id
reference_type
scores
0
value 0.00118
scoring_system epss
scoring_elements 0.30205
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-43649
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-43649
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-43649
3
reference_url https://github.com/baserproject/basercms/commit/874c55433fead93e0be9df96fd28740f8047c8b6
reference_id 874c55433fead93e0be9df96fd28740f8047c8b6
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
1
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-05T20:21:18Z/
url https://github.com/baserproject/basercms/commit/874c55433fead93e0be9df96fd28740f8047c8b6
4
reference_url https://github.com/advisories/GHSA-fw9x-cqjq-7jx5
reference_id GHSA-fw9x-cqjq-7jx5
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-fw9x-cqjq-7jx5
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-fw9x-cqjq-7jx5
reference_id GHSA-fw9x-cqjq-7jx5
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
1
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
2
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-05T20:21:18Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-fw9x-cqjq-7jx5
6
reference_url https://basercms.net/security/JVN_99052047
reference_id JVN_99052047
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
1
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-05T20:21:18Z/
url https://basercms.net/security/JVN_99052047
fixed_packages
0
url pkg:composer/baserproject/basercms@4.8.0
purl pkg:composer/baserproject/basercms@4.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-686s-gr1n-4qa9
2
vulnerability VCID-6p1v-g9d1-zfe5
3
vulnerability VCID-c77m-9mgg-c3ht
4
vulnerability VCID-cknd-kv9u-sfdc
5
vulnerability VCID-cprt-rzws-tkgh
6
vulnerability VCID-cyb9-u781-tkar
7
vulnerability VCID-e1dn-at7q-t7fj
8
vulnerability VCID-f1qc-b1uy-uycf
9
vulnerability VCID-mkbe-t5bg-a3fz
10
vulnerability VCID-mnc6-6egy-jbhn
11
vulnerability VCID-pfj6-r4pn-wfhf
12
vulnerability VCID-py24-kt42-9kdy
13
vulnerability VCID-qv2s-xgym-v3bv
14
vulnerability VCID-wgd1-9jtr-vfgj
15
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.8.0
1
url pkg:composer/baserproject/basercms@5.0.0
purl pkg:composer/baserproject/basercms@5.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-686s-gr1n-4qa9
2
vulnerability VCID-6p1v-g9d1-zfe5
3
vulnerability VCID-c77m-9mgg-c3ht
4
vulnerability VCID-cprt-rzws-tkgh
5
vulnerability VCID-cyb9-u781-tkar
6
vulnerability VCID-e1dn-at7q-t7fj
7
vulnerability VCID-f1qc-b1uy-uycf
8
vulnerability VCID-mkbe-t5bg-a3fz
9
vulnerability VCID-mnc6-6egy-jbhn
10
vulnerability VCID-pfj6-r4pn-wfhf
11
vulnerability VCID-py24-kt42-9kdy
12
vulnerability VCID-qv2s-xgym-v3bv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@5.0.0
aliases CVE-2023-43649, GHSA-fw9x-cqjq-7jx5
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e7n8-hhe7-5qhp
22
url VCID-f1qc-b1uy-uycf
vulnerability_id VCID-f1qc-b1uy-uycf
summary baserCMS is a website development framework. Prior to version 5.2.3, there is an OS command injection vulnerability in the update functionality. Due to this issue, an authenticated user with administrator privileges in baserCMS can execute arbitrary OS commands on the server with the privileges of the user account running baserCMS. This issue has been patched in version 5.2.3.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-30877
reference_id
reference_type
scores
0
value 0.00066
scoring_system epss
scoring_elements 0.20668
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-30877
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-30877
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-30877
3
reference_url https://github.com/baserproject/basercms/releases/tag/5.2.3
reference_id 5.2.3
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-02T14:43:30Z/
url https://github.com/baserproject/basercms/releases/tag/5.2.3
4
reference_url https://github.com/advisories/GHSA-m9g7-rgfc-jcm7
reference_id GHSA-m9g7-rgfc-jcm7
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-m9g7-rgfc-jcm7
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-m9g7-rgfc-jcm7
reference_id GHSA-m9g7-rgfc-jcm7
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-02T14:43:30Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-m9g7-rgfc-jcm7
6
reference_url https://basercms.net/security/JVN_20837860
reference_id JVN_20837860
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-02T14:43:30Z/
url https://basercms.net/security/JVN_20837860
fixed_packages
0
url pkg:composer/baserproject/basercms@5.2.3
purl pkg:composer/baserproject/basercms@5.2.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@5.2.3
aliases CVE-2026-30877, GHSA-m9g7-rgfc-jcm7
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f1qc-b1uy-uycf
23
url VCID-fw67-k8ej-57bf
vulnerability_id VCID-fw67-k8ej-57bf
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-18943
reference_id
reference_type
scores
0
value 0.00305
scoring_system epss
scoring_elements 0.54157
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-18943
1
reference_url https://basercms.net/release/4_1_4
reference_id
reference_type
scores
url https://basercms.net/release/4_1_4
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-18943
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-18943
3
reference_url https://web.archive.org/web/20200130073341/https://basercms.net/release/4_1_4
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200130073341/https://basercms.net/release/4_1_4
4
reference_url https://web.archive.org/web/20211209034642/http://sunu11.com/2018/10/31/baserCMS
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20211209034642/http://sunu11.com/2018/10/31/baserCMS
fixed_packages
0
url pkg:composer/baserproject/basercms@4.1.4
purl pkg:composer/baserproject/basercms@4.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7rv4-k7qe-vyds
10
vulnerability VCID-ambd-vx8w-y7b5
11
vulnerability VCID-c77m-9mgg-c3ht
12
vulnerability VCID-cknd-kv9u-sfdc
13
vulnerability VCID-cprt-rzws-tkgh
14
vulnerability VCID-cyb9-u781-tkar
15
vulnerability VCID-d1m5-npyb-93ba
16
vulnerability VCID-dfqh-8ekp-wbdz
17
vulnerability VCID-e1dn-at7q-t7fj
18
vulnerability VCID-e3g3-wbbd-k7fy
19
vulnerability VCID-e7n8-hhe7-5qhp
20
vulnerability VCID-f1qc-b1uy-uycf
21
vulnerability VCID-gfx3-at47-u7aq
22
vulnerability VCID-m3jy-vamm-7qgq
23
vulnerability VCID-mkbe-t5bg-a3fz
24
vulnerability VCID-mnc6-6egy-jbhn
25
vulnerability VCID-pfj6-r4pn-wfhf
26
vulnerability VCID-py24-kt42-9kdy
27
vulnerability VCID-qk6g-muqe-hqfr
28
vulnerability VCID-qv2s-xgym-v3bv
29
vulnerability VCID-ra7y-cb5e-w7ee
30
vulnerability VCID-tf16-deep-v3bs
31
vulnerability VCID-tjg8-cmv3-43d8
32
vulnerability VCID-upvv-xbqd-9bcz
33
vulnerability VCID-vmf1-uj3x-5yg4
34
vulnerability VCID-wgd1-9jtr-vfgj
35
vulnerability VCID-ygym-64en-vbav
36
vulnerability VCID-zvaq-2qbe-myhg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.1.4
aliases CVE-2018-18943, GHSA-fx2m-5m9v-jhgp
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fw67-k8ej-57bf
24
url VCID-hmdp-y273-wqan
vulnerability_id VCID-hmdp-y273-wqan
summary
references
0
reference_url http://jvn.jp/en/jp/JVN67881316/index.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://jvn.jp/en/jp/JVN67881316/index.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-0573
reference_id
reference_type
scores
0
value 0.00173
scoring_system epss
scoring_elements 0.38577
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-0573
2
reference_url https://basercms.net/security/JVN67881316
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://basercms.net/security/JVN67881316
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-0573
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-0573
fixed_packages
0
url pkg:composer/baserproject/basercms@3.0.16
purl pkg:composer/baserproject/basercms@3.0.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7rv4-k7qe-vyds
10
vulnerability VCID-ambd-vx8w-y7b5
11
vulnerability VCID-c77m-9mgg-c3ht
12
vulnerability VCID-cknd-kv9u-sfdc
13
vulnerability VCID-cprt-rzws-tkgh
14
vulnerability VCID-cyb9-u781-tkar
15
vulnerability VCID-d1m5-npyb-93ba
16
vulnerability VCID-dfqh-8ekp-wbdz
17
vulnerability VCID-e1dn-at7q-t7fj
18
vulnerability VCID-e3g3-wbbd-k7fy
19
vulnerability VCID-e7n8-hhe7-5qhp
20
vulnerability VCID-f1qc-b1uy-uycf
21
vulnerability VCID-fw67-k8ej-57bf
22
vulnerability VCID-m3jy-vamm-7qgq
23
vulnerability VCID-mkbe-t5bg-a3fz
24
vulnerability VCID-mnc6-6egy-jbhn
25
vulnerability VCID-pfj6-r4pn-wfhf
26
vulnerability VCID-py24-kt42-9kdy
27
vulnerability VCID-qk6g-muqe-hqfr
28
vulnerability VCID-qv2s-xgym-v3bv
29
vulnerability VCID-ra7y-cb5e-w7ee
30
vulnerability VCID-tjg8-cmv3-43d8
31
vulnerability VCID-upvv-xbqd-9bcz
32
vulnerability VCID-vmf1-uj3x-5yg4
33
vulnerability VCID-vncw-7kq5-rkfj
34
vulnerability VCID-wgd1-9jtr-vfgj
35
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@3.0.16
1
url pkg:composer/baserproject/basercms@4.1.1
purl pkg:composer/baserproject/basercms@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7rv4-k7qe-vyds
10
vulnerability VCID-ambd-vx8w-y7b5
11
vulnerability VCID-c77m-9mgg-c3ht
12
vulnerability VCID-cknd-kv9u-sfdc
13
vulnerability VCID-cprt-rzws-tkgh
14
vulnerability VCID-cyb9-u781-tkar
15
vulnerability VCID-d1m5-npyb-93ba
16
vulnerability VCID-dfqh-8ekp-wbdz
17
vulnerability VCID-e1dn-at7q-t7fj
18
vulnerability VCID-e3g3-wbbd-k7fy
19
vulnerability VCID-e7n8-hhe7-5qhp
20
vulnerability VCID-f1qc-b1uy-uycf
21
vulnerability VCID-fw67-k8ej-57bf
22
vulnerability VCID-gfx3-at47-u7aq
23
vulnerability VCID-m3jy-vamm-7qgq
24
vulnerability VCID-mkbe-t5bg-a3fz
25
vulnerability VCID-mnc6-6egy-jbhn
26
vulnerability VCID-pfj6-r4pn-wfhf
27
vulnerability VCID-py24-kt42-9kdy
28
vulnerability VCID-qk6g-muqe-hqfr
29
vulnerability VCID-qv2s-xgym-v3bv
30
vulnerability VCID-ra7y-cb5e-w7ee
31
vulnerability VCID-tf16-deep-v3bs
32
vulnerability VCID-tjg8-cmv3-43d8
33
vulnerability VCID-upvv-xbqd-9bcz
34
vulnerability VCID-vmf1-uj3x-5yg4
35
vulnerability VCID-vncw-7kq5-rkfj
36
vulnerability VCID-wgd1-9jtr-vfgj
37
vulnerability VCID-ygym-64en-vbav
38
vulnerability VCID-zvaq-2qbe-myhg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.1.1
aliases CVE-2018-0573, GHSA-33fq-qm4m-cjw3
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hmdp-y273-wqan
25
url VCID-kmfp-ar4u-5bdm
vulnerability_id VCID-kmfp-ar4u-5bdm
summary
references
0
reference_url http://jvn.jp/en/jp/JVN67881316/index.html
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://jvn.jp/en/jp/JVN67881316/index.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-0569
reference_id
reference_type
scores
0
value 0.01
scoring_system epss
scoring_elements 0.77421
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-0569
2
reference_url https://basercms.net/security/JVN67881316
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://basercms.net/security/JVN67881316
3
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-0569
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-0569
fixed_packages
0
url pkg:composer/baserproject/basercms@3.0.16
purl pkg:composer/baserproject/basercms@3.0.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7rv4-k7qe-vyds
10
vulnerability VCID-ambd-vx8w-y7b5
11
vulnerability VCID-c77m-9mgg-c3ht
12
vulnerability VCID-cknd-kv9u-sfdc
13
vulnerability VCID-cprt-rzws-tkgh
14
vulnerability VCID-cyb9-u781-tkar
15
vulnerability VCID-d1m5-npyb-93ba
16
vulnerability VCID-dfqh-8ekp-wbdz
17
vulnerability VCID-e1dn-at7q-t7fj
18
vulnerability VCID-e3g3-wbbd-k7fy
19
vulnerability VCID-e7n8-hhe7-5qhp
20
vulnerability VCID-f1qc-b1uy-uycf
21
vulnerability VCID-fw67-k8ej-57bf
22
vulnerability VCID-m3jy-vamm-7qgq
23
vulnerability VCID-mkbe-t5bg-a3fz
24
vulnerability VCID-mnc6-6egy-jbhn
25
vulnerability VCID-pfj6-r4pn-wfhf
26
vulnerability VCID-py24-kt42-9kdy
27
vulnerability VCID-qk6g-muqe-hqfr
28
vulnerability VCID-qv2s-xgym-v3bv
29
vulnerability VCID-ra7y-cb5e-w7ee
30
vulnerability VCID-tjg8-cmv3-43d8
31
vulnerability VCID-upvv-xbqd-9bcz
32
vulnerability VCID-vmf1-uj3x-5yg4
33
vulnerability VCID-vncw-7kq5-rkfj
34
vulnerability VCID-wgd1-9jtr-vfgj
35
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@3.0.16
1
url pkg:composer/baserproject/basercms@4.1.1
purl pkg:composer/baserproject/basercms@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7rv4-k7qe-vyds
10
vulnerability VCID-ambd-vx8w-y7b5
11
vulnerability VCID-c77m-9mgg-c3ht
12
vulnerability VCID-cknd-kv9u-sfdc
13
vulnerability VCID-cprt-rzws-tkgh
14
vulnerability VCID-cyb9-u781-tkar
15
vulnerability VCID-d1m5-npyb-93ba
16
vulnerability VCID-dfqh-8ekp-wbdz
17
vulnerability VCID-e1dn-at7q-t7fj
18
vulnerability VCID-e3g3-wbbd-k7fy
19
vulnerability VCID-e7n8-hhe7-5qhp
20
vulnerability VCID-f1qc-b1uy-uycf
21
vulnerability VCID-fw67-k8ej-57bf
22
vulnerability VCID-gfx3-at47-u7aq
23
vulnerability VCID-m3jy-vamm-7qgq
24
vulnerability VCID-mkbe-t5bg-a3fz
25
vulnerability VCID-mnc6-6egy-jbhn
26
vulnerability VCID-pfj6-r4pn-wfhf
27
vulnerability VCID-py24-kt42-9kdy
28
vulnerability VCID-qk6g-muqe-hqfr
29
vulnerability VCID-qv2s-xgym-v3bv
30
vulnerability VCID-ra7y-cb5e-w7ee
31
vulnerability VCID-tf16-deep-v3bs
32
vulnerability VCID-tjg8-cmv3-43d8
33
vulnerability VCID-upvv-xbqd-9bcz
34
vulnerability VCID-vmf1-uj3x-5yg4
35
vulnerability VCID-vncw-7kq5-rkfj
36
vulnerability VCID-wgd1-9jtr-vfgj
37
vulnerability VCID-ygym-64en-vbav
38
vulnerability VCID-zvaq-2qbe-myhg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.1.1
aliases CVE-2018-0569, GHSA-6j3p-vrph-j7qq
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kmfp-ar4u-5bdm
26
url VCID-m3jy-vamm-7qgq
vulnerability_id VCID-m3jy-vamm-7qgq
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-20681
reference_id
reference_type
scores
0
value 0.00203
scoring_system epss
scoring_elements 0.4242
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-20681
1
reference_url https://basercms.net/security/JVN64869876
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://basercms.net/security/JVN64869876
2
reference_url https://jvn.jp/en/jp/JVN64869876/index.html
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://jvn.jp/en/jp/JVN64869876/index.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-20681
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-20681
4
reference_url https://github.com/advisories/GHSA-24p5-x9f9-vvpx
reference_id GHSA-24p5-x9f9-vvpx
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-24p5-x9f9-vvpx
fixed_packages
0
url pkg:composer/baserproject/basercms@4.4.5
purl pkg:composer/baserproject/basercms@4.4.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-2c9a-4k3v-1ydj
2
vulnerability VCID-3btn-6dkf-67aq
3
vulnerability VCID-3jx2-hpuj-afaf
4
vulnerability VCID-46uc-rvvt-5ke8
5
vulnerability VCID-686s-gr1n-4qa9
6
vulnerability VCID-6p1v-g9d1-zfe5
7
vulnerability VCID-6yw8-d6jx-ykcm
8
vulnerability VCID-7rv4-k7qe-vyds
9
vulnerability VCID-ambd-vx8w-y7b5
10
vulnerability VCID-c77m-9mgg-c3ht
11
vulnerability VCID-cknd-kv9u-sfdc
12
vulnerability VCID-cprt-rzws-tkgh
13
vulnerability VCID-cyb9-u781-tkar
14
vulnerability VCID-d1m5-npyb-93ba
15
vulnerability VCID-e1dn-at7q-t7fj
16
vulnerability VCID-e3g3-wbbd-k7fy
17
vulnerability VCID-e7n8-hhe7-5qhp
18
vulnerability VCID-f1qc-b1uy-uycf
19
vulnerability VCID-mkbe-t5bg-a3fz
20
vulnerability VCID-mnc6-6egy-jbhn
21
vulnerability VCID-pfj6-r4pn-wfhf
22
vulnerability VCID-py24-kt42-9kdy
23
vulnerability VCID-qv2s-xgym-v3bv
24
vulnerability VCID-ra7y-cb5e-w7ee
25
vulnerability VCID-tjg8-cmv3-43d8
26
vulnerability VCID-wgd1-9jtr-vfgj
27
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.4.5
aliases CVE-2021-20681, GHSA-24p5-x9f9-vvpx
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m3jy-vamm-7qgq
27
url VCID-mkbe-t5bg-a3fz
vulnerability_id VCID-mkbe-t5bg-a3fz
summary baserCMS is a website development framework. Prior to version 5.2.3, the application's restore function allows users to upload a .zip file, which is then automatically extracted. A PHP file inside the archive is included using require_once without validating or restricting the filename. An attacker can craft a malicious PHP file within the zip and achieve arbitrary code execution when it is included. This issue has been patched in version 5.2.3.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-32957
reference_id
reference_type
scores
0
value 0.00033
scoring_system epss
scoring_elements 0.09994
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-32957
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-32957
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-32957
3
reference_url https://github.com/baserproject/basercms/releases/tag/5.2.3
reference_id 5.2.3
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-03-31T18:39:21Z/
url https://github.com/baserproject/basercms/releases/tag/5.2.3
4
reference_url https://github.com/advisories/GHSA-hv78-cwp4-8r7r
reference_id GHSA-hv78-cwp4-8r7r
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hv78-cwp4-8r7r
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-hv78-cwp4-8r7r
reference_id GHSA-hv78-cwp4-8r7r
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-03-31T18:39:21Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-hv78-cwp4-8r7r
6
reference_url https://basercms.net/security/JVN_20837860
reference_id JVN_20837860
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-03-31T18:39:21Z/
url https://basercms.net/security/JVN_20837860
fixed_packages
0
url pkg:composer/baserproject/basercms@5.2.3
purl pkg:composer/baserproject/basercms@5.2.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@5.2.3
aliases CVE-2025-32957, GHSA-hv78-cwp4-8r7r
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mkbe-t5bg-a3fz
28
url VCID-mnc6-6egy-jbhn
vulnerability_id VCID-mnc6-6egy-jbhn
summary baserCMS is a website development framework. Prior to version 5.2.3, a public mail submission API allows unauthenticated users to submit mail form entries even when the corresponding form is not accepting submissions. This bypasses administrative controls intended to stop form intake and enables spam or abuse via the API. This issue has been patched in version 5.2.3.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-30878
reference_id
reference_type
scores
0
value 0.0002
scoring_system epss
scoring_elements 0.05923
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-30878
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-30878
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-30878
3
reference_url https://github.com/baserproject/basercms/releases/tag/5.2.3
reference_id 5.2.3
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-31T18:39:51Z/
url https://github.com/baserproject/basercms/releases/tag/5.2.3
4
reference_url https://github.com/advisories/GHSA-8cr7-r8qw-gp3c
reference_id GHSA-8cr7-r8qw-gp3c
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8cr7-r8qw-gp3c
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-8cr7-r8qw-gp3c
reference_id GHSA-8cr7-r8qw-gp3c
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-31T18:39:51Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-8cr7-r8qw-gp3c
6
reference_url https://basercms.net/security/JVN_20837860
reference_id JVN_20837860
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-31T18:39:51Z/
url https://basercms.net/security/JVN_20837860
fixed_packages
0
url pkg:composer/baserproject/basercms@5.2.3
purl pkg:composer/baserproject/basercms@5.2.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@5.2.3
aliases CVE-2026-30878, GHSA-8cr7-r8qw-gp3c
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mnc6-6egy-jbhn
29
url VCID-pfj6-r4pn-wfhf
vulnerability_id VCID-pfj6-r4pn-wfhf
summary baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Edit Email Form Settings Feature. Version 5.1.2 fixes the issue.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-46998
reference_id
reference_type
scores
0
value 0.01064
scoring_system epss
scoring_elements 0.78094
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-46998
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
1
value 5.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:P/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-46998
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
1
value 5.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:P/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-46998
3
reference_url https://github.com/advisories/GHSA-p3m2-mj3j-j49x
reference_id GHSA-p3m2-mj3j-j49x
reference_type
scores
url https://github.com/advisories/GHSA-p3m2-mj3j-j49x
4
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-p3m2-mj3j-j49x
reference_id GHSA-p3m2-mj3j-j49x
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
1
value 5.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:P/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-24T20:01:19Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-p3m2-mj3j-j49x
5
reference_url https://basercms.net/security/JVN_98693329
reference_id JVN_98693329
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
1
value 5.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:P/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-24T20:01:19Z/
url https://basercms.net/security/JVN_98693329
fixed_packages
0
url pkg:composer/baserproject/basercms@5.1.2
purl pkg:composer/baserproject/basercms@5.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-6p1v-g9d1-zfe5
2
vulnerability VCID-cprt-rzws-tkgh
3
vulnerability VCID-cyb9-u781-tkar
4
vulnerability VCID-e1dn-at7q-t7fj
5
vulnerability VCID-f1qc-b1uy-uycf
6
vulnerability VCID-mkbe-t5bg-a3fz
7
vulnerability VCID-mnc6-6egy-jbhn
8
vulnerability VCID-py24-kt42-9kdy
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@5.1.2
aliases CVE-2024-46998, GHSA-p3m2-mj3j-j49x
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pfj6-r4pn-wfhf
30
url VCID-py24-kt42-9kdy
vulnerability_id VCID-py24-kt42-9kdy
summary baserCMS is a website development framework. Prior to version 5.2.3, a path traversal vulnerability exists in the theme file management API (/baser/api/admin/bc-theme-file/theme_files/add.json) that allows arbitrary file write. An authenticated administrator can include ../ sequences in the path parameter to create a PHP file in an arbitrary directory outside the theme directory, which may result in remote code execution (RCE). This issue has been patched in version 5.2.3.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-30940
reference_id
reference_type
scores
0
value 0.00151
scoring_system epss
scoring_elements 0.35518
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-30940
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-30940
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-30940
3
reference_url https://github.com/baserproject/basercms/releases/tag/5.2.3
reference_id 5.2.3
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-02T14:46:24Z/
url https://github.com/baserproject/basercms/releases/tag/5.2.3
4
reference_url https://github.com/advisories/GHSA-c5c6-37vq-pjcq
reference_id GHSA-c5c6-37vq-pjcq
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-c5c6-37vq-pjcq
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-c5c6-37vq-pjcq
reference_id GHSA-c5c6-37vq-pjcq
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-02T14:46:24Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-c5c6-37vq-pjcq
6
reference_url https://basercms.net/security/JVN_20837860
reference_id JVN_20837860
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-02T14:46:24Z/
url https://basercms.net/security/JVN_20837860
fixed_packages
0
url pkg:composer/baserproject/basercms@5.2.3
purl pkg:composer/baserproject/basercms@5.2.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@5.2.3
aliases CVE-2026-30940, GHSA-c5c6-37vq-pjcq
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-py24-kt42-9kdy
31
url VCID-qk6g-muqe-hqfr
vulnerability_id VCID-qk6g-muqe-hqfr
summary Cross Site Scripting(XSS) Vulnerability in Latest Release 4.3.6 Site basic settings
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-15155
reference_id
reference_type
scores
0
value 0.00868
scoring_system epss
scoring_elements 0.75607
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-15155
1
reference_url https://basercms.net/security/20200827
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://basercms.net/security/20200827
2
reference_url https://github.com/baserproject/basercms/commit/94cbfab74c9fd6d04492597a1a684674c3c0e30f
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms/commit/94cbfab74c9fd6d04492597a1a684674c3c0e30f
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-15155
reference_id CVE-2020-15155
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-15155
4
reference_url https://github.com/advisories/GHSA-4r3m-j6x5-48m3
reference_id GHSA-4r3m-j6x5-48m3
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4r3m-j6x5-48m3
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-4r3m-j6x5-48m3
reference_id GHSA-4r3m-j6x5-48m3
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value LOW
scoring_system cvssv3.1_qr
scoring_elements
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms/security/advisories/GHSA-4r3m-j6x5-48m3
fixed_packages
0
url pkg:composer/baserproject/basercms@4.3.7
purl pkg:composer/baserproject/basercms@4.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7rv4-k7qe-vyds
10
vulnerability VCID-ambd-vx8w-y7b5
11
vulnerability VCID-c77m-9mgg-c3ht
12
vulnerability VCID-cknd-kv9u-sfdc
13
vulnerability VCID-cprt-rzws-tkgh
14
vulnerability VCID-cyb9-u781-tkar
15
vulnerability VCID-d1m5-npyb-93ba
16
vulnerability VCID-dfqh-8ekp-wbdz
17
vulnerability VCID-e1dn-at7q-t7fj
18
vulnerability VCID-e3g3-wbbd-k7fy
19
vulnerability VCID-e7n8-hhe7-5qhp
20
vulnerability VCID-f1qc-b1uy-uycf
21
vulnerability VCID-gfx3-at47-u7aq
22
vulnerability VCID-m3jy-vamm-7qgq
23
vulnerability VCID-mkbe-t5bg-a3fz
24
vulnerability VCID-mnc6-6egy-jbhn
25
vulnerability VCID-pfj6-r4pn-wfhf
26
vulnerability VCID-py24-kt42-9kdy
27
vulnerability VCID-qv2s-xgym-v3bv
28
vulnerability VCID-ra7y-cb5e-w7ee
29
vulnerability VCID-tf16-deep-v3bs
30
vulnerability VCID-tjg8-cmv3-43d8
31
vulnerability VCID-wgd1-9jtr-vfgj
32
vulnerability VCID-ygym-64en-vbav
33
vulnerability VCID-zvaq-2qbe-myhg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.3.7
aliases CVE-2020-15155, GHSA-4r3m-j6x5-48m3
risk_score 1.4
exploitability 0.5
weighted_severity 2.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qk6g-muqe-hqfr
32
url VCID-qv2s-xgym-v3bv
vulnerability_id VCID-qv2s-xgym-v3bv
summary baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog posts and Contents list Feature. Version 5.1.2 fixes this issue.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-46994
reference_id
reference_type
scores
0
value 0.01179
scoring_system epss
scoring_elements 0.79156
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-46994
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-46994
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-46994
3
reference_url https://github.com/advisories/GHSA-wrjc-fmfq-w3jr
reference_id GHSA-wrjc-fmfq-w3jr
reference_type
scores
url https://github.com/advisories/GHSA-wrjc-fmfq-w3jr
4
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-wrjc-fmfq-w3jr
reference_id GHSA-wrjc-fmfq-w3jr
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-24T19:23:44Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-wrjc-fmfq-w3jr
5
reference_url https://basercms.net/security/JVN_00876083
reference_id JVN_00876083
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-24T19:23:44Z/
url https://basercms.net/security/JVN_00876083
fixed_packages
0
url pkg:composer/baserproject/basercms@5.1.2
purl pkg:composer/baserproject/basercms@5.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-6p1v-g9d1-zfe5
2
vulnerability VCID-cprt-rzws-tkgh
3
vulnerability VCID-cyb9-u781-tkar
4
vulnerability VCID-e1dn-at7q-t7fj
5
vulnerability VCID-f1qc-b1uy-uycf
6
vulnerability VCID-mkbe-t5bg-a3fz
7
vulnerability VCID-mnc6-6egy-jbhn
8
vulnerability VCID-py24-kt42-9kdy
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@5.1.2
aliases CVE-2024-46994, GHSA-wrjc-fmfq-w3jr
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qv2s-xgym-v3bv
33
url VCID-ra7y-cb5e-w7ee
vulnerability_id VCID-ra7y-cb5e-w7ee
summary
references
0
reference_url http://jvn.jp/en/jp/JVN14134801/index.html
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://jvn.jp/en/jp/JVN14134801/index.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-39136
reference_id
reference_type
scores
0
value 0.0054
scoring_system epss
scoring_elements 0.68047
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-39136
2
reference_url https://basercms.net/security/JVN_14134801
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://basercms.net/security/JVN_14134801
3
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
4
reference_url https://github.com/baserproject/basercms/commit/568d4cab5ba1cdee7bbf0133c676d02a98f6d7bc
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms/commit/568d4cab5ba1cdee7bbf0133c676d02a98f6d7bc
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-hgjr-632x-qpp3
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms/security/advisories/GHSA-hgjr-632x-qpp3
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-39136
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-39136
7
reference_url https://github.com/advisories/GHSA-hgjr-632x-qpp3
reference_id GHSA-hgjr-632x-qpp3
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hgjr-632x-qpp3
fixed_packages
0
url pkg:composer/baserproject/basercms@4.5.1
purl pkg:composer/baserproject/basercms@4.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-2c9a-4k3v-1ydj
2
vulnerability VCID-3btn-6dkf-67aq
3
vulnerability VCID-3jx2-hpuj-afaf
4
vulnerability VCID-46uc-rvvt-5ke8
5
vulnerability VCID-686s-gr1n-4qa9
6
vulnerability VCID-6p1v-g9d1-zfe5
7
vulnerability VCID-6yw8-d6jx-ykcm
8
vulnerability VCID-7rv4-k7qe-vyds
9
vulnerability VCID-ambd-vx8w-y7b5
10
vulnerability VCID-c77m-9mgg-c3ht
11
vulnerability VCID-cknd-kv9u-sfdc
12
vulnerability VCID-cprt-rzws-tkgh
13
vulnerability VCID-cyb9-u781-tkar
14
vulnerability VCID-d1m5-npyb-93ba
15
vulnerability VCID-e1dn-at7q-t7fj
16
vulnerability VCID-e3g3-wbbd-k7fy
17
vulnerability VCID-e7n8-hhe7-5qhp
18
vulnerability VCID-f1qc-b1uy-uycf
19
vulnerability VCID-mkbe-t5bg-a3fz
20
vulnerability VCID-mnc6-6egy-jbhn
21
vulnerability VCID-pfj6-r4pn-wfhf
22
vulnerability VCID-py24-kt42-9kdy
23
vulnerability VCID-qv2s-xgym-v3bv
24
vulnerability VCID-tjg8-cmv3-43d8
25
vulnerability VCID-wgd1-9jtr-vfgj
26
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.5.1
aliases CVE-2021-39136, GHSA-hgjr-632x-qpp3
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ra7y-cb5e-w7ee
34
url VCID-rzcn-4yzc-g3dy
vulnerability_id VCID-rzcn-4yzc-g3dy
summary
references
0
reference_url http://jvn.jp/en/jp/JVN67881316/index.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://jvn.jp/en/jp/JVN67881316/index.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-0575
reference_id
reference_type
scores
0
value 0.00169
scoring_system epss
scoring_elements 0.37911
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-0575
2
reference_url https://basercms.net/security/JVN67881316
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://basercms.net/security/JVN67881316
3
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-0575
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-0575
fixed_packages
0
url pkg:composer/baserproject/basercms@3.0.16
purl pkg:composer/baserproject/basercms@3.0.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7rv4-k7qe-vyds
10
vulnerability VCID-ambd-vx8w-y7b5
11
vulnerability VCID-c77m-9mgg-c3ht
12
vulnerability VCID-cknd-kv9u-sfdc
13
vulnerability VCID-cprt-rzws-tkgh
14
vulnerability VCID-cyb9-u781-tkar
15
vulnerability VCID-d1m5-npyb-93ba
16
vulnerability VCID-dfqh-8ekp-wbdz
17
vulnerability VCID-e1dn-at7q-t7fj
18
vulnerability VCID-e3g3-wbbd-k7fy
19
vulnerability VCID-e7n8-hhe7-5qhp
20
vulnerability VCID-f1qc-b1uy-uycf
21
vulnerability VCID-fw67-k8ej-57bf
22
vulnerability VCID-m3jy-vamm-7qgq
23
vulnerability VCID-mkbe-t5bg-a3fz
24
vulnerability VCID-mnc6-6egy-jbhn
25
vulnerability VCID-pfj6-r4pn-wfhf
26
vulnerability VCID-py24-kt42-9kdy
27
vulnerability VCID-qk6g-muqe-hqfr
28
vulnerability VCID-qv2s-xgym-v3bv
29
vulnerability VCID-ra7y-cb5e-w7ee
30
vulnerability VCID-tjg8-cmv3-43d8
31
vulnerability VCID-upvv-xbqd-9bcz
32
vulnerability VCID-vmf1-uj3x-5yg4
33
vulnerability VCID-vncw-7kq5-rkfj
34
vulnerability VCID-wgd1-9jtr-vfgj
35
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@3.0.16
1
url pkg:composer/baserproject/basercms@4.1.1
purl pkg:composer/baserproject/basercms@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7rv4-k7qe-vyds
10
vulnerability VCID-ambd-vx8w-y7b5
11
vulnerability VCID-c77m-9mgg-c3ht
12
vulnerability VCID-cknd-kv9u-sfdc
13
vulnerability VCID-cprt-rzws-tkgh
14
vulnerability VCID-cyb9-u781-tkar
15
vulnerability VCID-d1m5-npyb-93ba
16
vulnerability VCID-dfqh-8ekp-wbdz
17
vulnerability VCID-e1dn-at7q-t7fj
18
vulnerability VCID-e3g3-wbbd-k7fy
19
vulnerability VCID-e7n8-hhe7-5qhp
20
vulnerability VCID-f1qc-b1uy-uycf
21
vulnerability VCID-fw67-k8ej-57bf
22
vulnerability VCID-gfx3-at47-u7aq
23
vulnerability VCID-m3jy-vamm-7qgq
24
vulnerability VCID-mkbe-t5bg-a3fz
25
vulnerability VCID-mnc6-6egy-jbhn
26
vulnerability VCID-pfj6-r4pn-wfhf
27
vulnerability VCID-py24-kt42-9kdy
28
vulnerability VCID-qk6g-muqe-hqfr
29
vulnerability VCID-qv2s-xgym-v3bv
30
vulnerability VCID-ra7y-cb5e-w7ee
31
vulnerability VCID-tf16-deep-v3bs
32
vulnerability VCID-tjg8-cmv3-43d8
33
vulnerability VCID-upvv-xbqd-9bcz
34
vulnerability VCID-vmf1-uj3x-5yg4
35
vulnerability VCID-vncw-7kq5-rkfj
36
vulnerability VCID-wgd1-9jtr-vfgj
37
vulnerability VCID-ygym-64en-vbav
38
vulnerability VCID-zvaq-2qbe-myhg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.1.1
aliases CVE-2018-0575, GHSA-w935-p7mg-xc96
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rzcn-4yzc-g3dy
35
url VCID-tjck-1ajy-ubb1
vulnerability_id VCID-tjck-1ajy-ubb1
summary
references
0
reference_url http://jvn.jp/en/jp/JVN67881316/index.html
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://jvn.jp/en/jp/JVN67881316/index.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-0571
reference_id
reference_type
scores
0
value 0.00167
scoring_system epss
scoring_elements 0.37604
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-0571
2
reference_url https://basercms.net/security/JVN67881316
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://basercms.net/security/JVN67881316
3
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-0571
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-0571
fixed_packages
0
url pkg:composer/baserproject/basercms@3.0.16
purl pkg:composer/baserproject/basercms@3.0.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7rv4-k7qe-vyds
10
vulnerability VCID-ambd-vx8w-y7b5
11
vulnerability VCID-c77m-9mgg-c3ht
12
vulnerability VCID-cknd-kv9u-sfdc
13
vulnerability VCID-cprt-rzws-tkgh
14
vulnerability VCID-cyb9-u781-tkar
15
vulnerability VCID-d1m5-npyb-93ba
16
vulnerability VCID-dfqh-8ekp-wbdz
17
vulnerability VCID-e1dn-at7q-t7fj
18
vulnerability VCID-e3g3-wbbd-k7fy
19
vulnerability VCID-e7n8-hhe7-5qhp
20
vulnerability VCID-f1qc-b1uy-uycf
21
vulnerability VCID-fw67-k8ej-57bf
22
vulnerability VCID-m3jy-vamm-7qgq
23
vulnerability VCID-mkbe-t5bg-a3fz
24
vulnerability VCID-mnc6-6egy-jbhn
25
vulnerability VCID-pfj6-r4pn-wfhf
26
vulnerability VCID-py24-kt42-9kdy
27
vulnerability VCID-qk6g-muqe-hqfr
28
vulnerability VCID-qv2s-xgym-v3bv
29
vulnerability VCID-ra7y-cb5e-w7ee
30
vulnerability VCID-tjg8-cmv3-43d8
31
vulnerability VCID-upvv-xbqd-9bcz
32
vulnerability VCID-vmf1-uj3x-5yg4
33
vulnerability VCID-vncw-7kq5-rkfj
34
vulnerability VCID-wgd1-9jtr-vfgj
35
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@3.0.16
1
url pkg:composer/baserproject/basercms@4.1.1
purl pkg:composer/baserproject/basercms@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7rv4-k7qe-vyds
10
vulnerability VCID-ambd-vx8w-y7b5
11
vulnerability VCID-c77m-9mgg-c3ht
12
vulnerability VCID-cknd-kv9u-sfdc
13
vulnerability VCID-cprt-rzws-tkgh
14
vulnerability VCID-cyb9-u781-tkar
15
vulnerability VCID-d1m5-npyb-93ba
16
vulnerability VCID-dfqh-8ekp-wbdz
17
vulnerability VCID-e1dn-at7q-t7fj
18
vulnerability VCID-e3g3-wbbd-k7fy
19
vulnerability VCID-e7n8-hhe7-5qhp
20
vulnerability VCID-f1qc-b1uy-uycf
21
vulnerability VCID-fw67-k8ej-57bf
22
vulnerability VCID-gfx3-at47-u7aq
23
vulnerability VCID-m3jy-vamm-7qgq
24
vulnerability VCID-mkbe-t5bg-a3fz
25
vulnerability VCID-mnc6-6egy-jbhn
26
vulnerability VCID-pfj6-r4pn-wfhf
27
vulnerability VCID-py24-kt42-9kdy
28
vulnerability VCID-qk6g-muqe-hqfr
29
vulnerability VCID-qv2s-xgym-v3bv
30
vulnerability VCID-ra7y-cb5e-w7ee
31
vulnerability VCID-tf16-deep-v3bs
32
vulnerability VCID-tjg8-cmv3-43d8
33
vulnerability VCID-upvv-xbqd-9bcz
34
vulnerability VCID-vmf1-uj3x-5yg4
35
vulnerability VCID-vncw-7kq5-rkfj
36
vulnerability VCID-wgd1-9jtr-vfgj
37
vulnerability VCID-ygym-64en-vbav
38
vulnerability VCID-zvaq-2qbe-myhg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.1.1
aliases CVE-2018-0571, GHSA-3mcp-6rv6-c69g
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tjck-1ajy-ubb1
36
url VCID-tjg8-cmv3-43d8
vulnerability_id VCID-tjg8-cmv3-43d8
summary OS Command Injection Vulnerability and Potential Zip Slip Vulnerability in baserCMS
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-41243
reference_id
reference_type
scores
0
value 0.02799
scoring_system epss
scoring_elements 0.86429
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-41243
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://github.com/baserproject/basercms/commit/9088b99c329d1faff3a2f1269f37b9a9d8d5f6ff
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms/commit/9088b99c329d1faff3a2f1269f37b9a9d8d5f6ff
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41243
reference_id CVE-2021-41243
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-41243
4
reference_url https://github.com/advisories/GHSA-7rpc-9m88-cf9w
reference_id GHSA-7rpc-9m88-cf9w
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7rpc-9m88-cf9w
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-7rpc-9m88-cf9w
reference_id GHSA-7rpc-9m88-cf9w
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L
1
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms/security/advisories/GHSA-7rpc-9m88-cf9w
fixed_packages
0
url pkg:composer/baserproject/basercms@4.5.4
purl pkg:composer/baserproject/basercms@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-2c9a-4k3v-1ydj
2
vulnerability VCID-3btn-6dkf-67aq
3
vulnerability VCID-3jx2-hpuj-afaf
4
vulnerability VCID-46uc-rvvt-5ke8
5
vulnerability VCID-686s-gr1n-4qa9
6
vulnerability VCID-6p1v-g9d1-zfe5
7
vulnerability VCID-7rv4-k7qe-vyds
8
vulnerability VCID-ambd-vx8w-y7b5
9
vulnerability VCID-c77m-9mgg-c3ht
10
vulnerability VCID-cknd-kv9u-sfdc
11
vulnerability VCID-cprt-rzws-tkgh
12
vulnerability VCID-cyb9-u781-tkar
13
vulnerability VCID-d1m5-npyb-93ba
14
vulnerability VCID-e1dn-at7q-t7fj
15
vulnerability VCID-e3g3-wbbd-k7fy
16
vulnerability VCID-e7n8-hhe7-5qhp
17
vulnerability VCID-f1qc-b1uy-uycf
18
vulnerability VCID-mkbe-t5bg-a3fz
19
vulnerability VCID-mnc6-6egy-jbhn
20
vulnerability VCID-pfj6-r4pn-wfhf
21
vulnerability VCID-py24-kt42-9kdy
22
vulnerability VCID-qv2s-xgym-v3bv
23
vulnerability VCID-wgd1-9jtr-vfgj
24
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.5.4
aliases CVE-2021-41243, GHSA-7rpc-9m88-cf9w
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tjg8-cmv3-43d8
37
url VCID-upvv-xbqd-9bcz
vulnerability_id VCID-upvv-xbqd-9bcz
summary Cross Site Scripting and RCE in baserCMS
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-15159
reference_id
reference_type
scores
0
value 0.01563
scoring_system epss
scoring_elements 0.81905
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-15159
1
reference_url https://basercms.net/security/20200827
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
1
value LOW
scoring_system generic_textual
scoring_elements
url https://basercms.net/security/20200827
2
reference_url https://github.com/baserproject/basercms/commit/16a7b3cd09a0ca355474119c76897eac2034a66d
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms/commit/16a7b3cd09a0ca355474119c76897eac2034a66d
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-15159
reference_id CVE-2020-15159
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-15159
4
reference_url https://github.com/advisories/GHSA-673x-f5wx-fxpw
reference_id GHSA-673x-f5wx-fxpw
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-673x-f5wx-fxpw
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-673x-f5wx-fxpw
reference_id GHSA-673x-f5wx-fxpw
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
1
value LOW
scoring_system cvssv3.1_qr
scoring_elements
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms/security/advisories/GHSA-673x-f5wx-fxpw
fixed_packages
0
url pkg:composer/baserproject/basercms@4.3.7
purl pkg:composer/baserproject/basercms@4.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7rv4-k7qe-vyds
10
vulnerability VCID-ambd-vx8w-y7b5
11
vulnerability VCID-c77m-9mgg-c3ht
12
vulnerability VCID-cknd-kv9u-sfdc
13
vulnerability VCID-cprt-rzws-tkgh
14
vulnerability VCID-cyb9-u781-tkar
15
vulnerability VCID-d1m5-npyb-93ba
16
vulnerability VCID-dfqh-8ekp-wbdz
17
vulnerability VCID-e1dn-at7q-t7fj
18
vulnerability VCID-e3g3-wbbd-k7fy
19
vulnerability VCID-e7n8-hhe7-5qhp
20
vulnerability VCID-f1qc-b1uy-uycf
21
vulnerability VCID-gfx3-at47-u7aq
22
vulnerability VCID-m3jy-vamm-7qgq
23
vulnerability VCID-mkbe-t5bg-a3fz
24
vulnerability VCID-mnc6-6egy-jbhn
25
vulnerability VCID-pfj6-r4pn-wfhf
26
vulnerability VCID-py24-kt42-9kdy
27
vulnerability VCID-qv2s-xgym-v3bv
28
vulnerability VCID-ra7y-cb5e-w7ee
29
vulnerability VCID-tf16-deep-v3bs
30
vulnerability VCID-tjg8-cmv3-43d8
31
vulnerability VCID-wgd1-9jtr-vfgj
32
vulnerability VCID-ygym-64en-vbav
33
vulnerability VCID-zvaq-2qbe-myhg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.3.7
aliases CVE-2020-15159, GHSA-673x-f5wx-fxpw
risk_score 1.4
exploitability 0.5
weighted_severity 2.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-upvv-xbqd-9bcz
38
url VCID-vmf1-uj3x-5yg4
vulnerability_id VCID-vmf1-uj3x-5yg4
summary Cross Site Scripting in baserCMS
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-15154
reference_id
reference_type
scores
0
value 0.00784
scoring_system epss
scoring_elements 0.74204
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-15154
1
reference_url https://basercms.net/security/20200827
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://basercms.net/security/20200827
2
reference_url https://github.com/baserproject/basercms/commit/7f4b905b90954e394ec10dd35bad2a5dec505371
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms/commit/7f4b905b90954e394ec10dd35bad2a5dec505371
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-15154
reference_id CVE-2020-15154
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-15154
4
reference_url https://github.com/advisories/GHSA-cpxc-67rc-c775
reference_id GHSA-cpxc-67rc-c775
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-cpxc-67rc-c775
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-cpxc-67rc-c775
reference_id GHSA-cpxc-67rc-c775
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value LOW
scoring_system cvssv3.1_qr
scoring_elements
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms/security/advisories/GHSA-cpxc-67rc-c775
fixed_packages
0
url pkg:composer/baserproject/basercms@4.3.7
purl pkg:composer/baserproject/basercms@4.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7rv4-k7qe-vyds
10
vulnerability VCID-ambd-vx8w-y7b5
11
vulnerability VCID-c77m-9mgg-c3ht
12
vulnerability VCID-cknd-kv9u-sfdc
13
vulnerability VCID-cprt-rzws-tkgh
14
vulnerability VCID-cyb9-u781-tkar
15
vulnerability VCID-d1m5-npyb-93ba
16
vulnerability VCID-dfqh-8ekp-wbdz
17
vulnerability VCID-e1dn-at7q-t7fj
18
vulnerability VCID-e3g3-wbbd-k7fy
19
vulnerability VCID-e7n8-hhe7-5qhp
20
vulnerability VCID-f1qc-b1uy-uycf
21
vulnerability VCID-gfx3-at47-u7aq
22
vulnerability VCID-m3jy-vamm-7qgq
23
vulnerability VCID-mkbe-t5bg-a3fz
24
vulnerability VCID-mnc6-6egy-jbhn
25
vulnerability VCID-pfj6-r4pn-wfhf
26
vulnerability VCID-py24-kt42-9kdy
27
vulnerability VCID-qv2s-xgym-v3bv
28
vulnerability VCID-ra7y-cb5e-w7ee
29
vulnerability VCID-tf16-deep-v3bs
30
vulnerability VCID-tjg8-cmv3-43d8
31
vulnerability VCID-wgd1-9jtr-vfgj
32
vulnerability VCID-ygym-64en-vbav
33
vulnerability VCID-zvaq-2qbe-myhg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.3.7
aliases CVE-2020-15154, GHSA-cpxc-67rc-c775
risk_score 1.4
exploitability 0.5
weighted_severity 2.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vmf1-uj3x-5yg4
39
url VCID-vncw-7kq5-rkfj
vulnerability_id VCID-vncw-7kq5-rkfj
summary RCE in baserCMS before 4.1.4
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-18942
reference_id
reference_type
scores
0
value 0.00928
scoring_system epss
scoring_elements 0.76535
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-18942
1
reference_url https://basercms.net/release/4_1_4
reference_id
reference_type
scores
url https://basercms.net/release/4_1_4
2
reference_url https://github.com/baserproject/basercms/issues/959
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms/issues/959
3
reference_url https://web.archive.org/web/20200130073341/https://basercms.net/release/4_1_4
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200130073341/https://basercms.net/release/4_1_4
4
reference_url https://web.archive.org/web/20211209034642/http://sunu11.com/2018/10/31/baserCMS
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20211209034642/http://sunu11.com/2018/10/31/baserCMS
5
reference_url https://web.archive.org/web/20211209034642/http://sunu11.com/2018/10/31/baserCMS/
reference_id
reference_type
scores
url https://web.archive.org/web/20211209034642/http://sunu11.com/2018/10/31/baserCMS/
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-18942
reference_id CVE-2018-18942
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-18942
7
reference_url https://github.com/advisories/GHSA-rjc2-x53r-6c9r
reference_id GHSA-rjc2-x53r-6c9r
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rjc2-x53r-6c9r
fixed_packages
0
url pkg:composer/baserproject/basercms@4.1.4
purl pkg:composer/baserproject/basercms@4.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7rv4-k7qe-vyds
10
vulnerability VCID-ambd-vx8w-y7b5
11
vulnerability VCID-c77m-9mgg-c3ht
12
vulnerability VCID-cknd-kv9u-sfdc
13
vulnerability VCID-cprt-rzws-tkgh
14
vulnerability VCID-cyb9-u781-tkar
15
vulnerability VCID-d1m5-npyb-93ba
16
vulnerability VCID-dfqh-8ekp-wbdz
17
vulnerability VCID-e1dn-at7q-t7fj
18
vulnerability VCID-e3g3-wbbd-k7fy
19
vulnerability VCID-e7n8-hhe7-5qhp
20
vulnerability VCID-f1qc-b1uy-uycf
21
vulnerability VCID-gfx3-at47-u7aq
22
vulnerability VCID-m3jy-vamm-7qgq
23
vulnerability VCID-mkbe-t5bg-a3fz
24
vulnerability VCID-mnc6-6egy-jbhn
25
vulnerability VCID-pfj6-r4pn-wfhf
26
vulnerability VCID-py24-kt42-9kdy
27
vulnerability VCID-qk6g-muqe-hqfr
28
vulnerability VCID-qv2s-xgym-v3bv
29
vulnerability VCID-ra7y-cb5e-w7ee
30
vulnerability VCID-tf16-deep-v3bs
31
vulnerability VCID-tjg8-cmv3-43d8
32
vulnerability VCID-upvv-xbqd-9bcz
33
vulnerability VCID-vmf1-uj3x-5yg4
34
vulnerability VCID-wgd1-9jtr-vfgj
35
vulnerability VCID-ygym-64en-vbav
36
vulnerability VCID-zvaq-2qbe-myhg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.1.4
aliases CVE-2018-18942, GHSA-rjc2-x53r-6c9r
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vncw-7kq5-rkfj
40
url VCID-wg9h-rupq-xbea
vulnerability_id VCID-wg9h-rupq-xbea
summary
references
0
reference_url http://jvn.jp/en/jp/JVN67881316/index.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://jvn.jp/en/jp/JVN67881316/index.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-0574
reference_id
reference_type
scores
0
value 0.0026
scoring_system epss
scoring_elements 0.49708
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-0574
2
reference_url https://basercms.net/security/JVN67881316
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://basercms.net/security/JVN67881316
3
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-0574
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-0574
fixed_packages
0
url pkg:composer/baserproject/basercms@3.0.16
purl pkg:composer/baserproject/basercms@3.0.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7rv4-k7qe-vyds
10
vulnerability VCID-ambd-vx8w-y7b5
11
vulnerability VCID-c77m-9mgg-c3ht
12
vulnerability VCID-cknd-kv9u-sfdc
13
vulnerability VCID-cprt-rzws-tkgh
14
vulnerability VCID-cyb9-u781-tkar
15
vulnerability VCID-d1m5-npyb-93ba
16
vulnerability VCID-dfqh-8ekp-wbdz
17
vulnerability VCID-e1dn-at7q-t7fj
18
vulnerability VCID-e3g3-wbbd-k7fy
19
vulnerability VCID-e7n8-hhe7-5qhp
20
vulnerability VCID-f1qc-b1uy-uycf
21
vulnerability VCID-fw67-k8ej-57bf
22
vulnerability VCID-m3jy-vamm-7qgq
23
vulnerability VCID-mkbe-t5bg-a3fz
24
vulnerability VCID-mnc6-6egy-jbhn
25
vulnerability VCID-pfj6-r4pn-wfhf
26
vulnerability VCID-py24-kt42-9kdy
27
vulnerability VCID-qk6g-muqe-hqfr
28
vulnerability VCID-qv2s-xgym-v3bv
29
vulnerability VCID-ra7y-cb5e-w7ee
30
vulnerability VCID-tjg8-cmv3-43d8
31
vulnerability VCID-upvv-xbqd-9bcz
32
vulnerability VCID-vmf1-uj3x-5yg4
33
vulnerability VCID-vncw-7kq5-rkfj
34
vulnerability VCID-wgd1-9jtr-vfgj
35
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@3.0.16
1
url pkg:composer/baserproject/basercms@4.1.1
purl pkg:composer/baserproject/basercms@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7rv4-k7qe-vyds
10
vulnerability VCID-ambd-vx8w-y7b5
11
vulnerability VCID-c77m-9mgg-c3ht
12
vulnerability VCID-cknd-kv9u-sfdc
13
vulnerability VCID-cprt-rzws-tkgh
14
vulnerability VCID-cyb9-u781-tkar
15
vulnerability VCID-d1m5-npyb-93ba
16
vulnerability VCID-dfqh-8ekp-wbdz
17
vulnerability VCID-e1dn-at7q-t7fj
18
vulnerability VCID-e3g3-wbbd-k7fy
19
vulnerability VCID-e7n8-hhe7-5qhp
20
vulnerability VCID-f1qc-b1uy-uycf
21
vulnerability VCID-fw67-k8ej-57bf
22
vulnerability VCID-gfx3-at47-u7aq
23
vulnerability VCID-m3jy-vamm-7qgq
24
vulnerability VCID-mkbe-t5bg-a3fz
25
vulnerability VCID-mnc6-6egy-jbhn
26
vulnerability VCID-pfj6-r4pn-wfhf
27
vulnerability VCID-py24-kt42-9kdy
28
vulnerability VCID-qk6g-muqe-hqfr
29
vulnerability VCID-qv2s-xgym-v3bv
30
vulnerability VCID-ra7y-cb5e-w7ee
31
vulnerability VCID-tf16-deep-v3bs
32
vulnerability VCID-tjg8-cmv3-43d8
33
vulnerability VCID-upvv-xbqd-9bcz
34
vulnerability VCID-vmf1-uj3x-5yg4
35
vulnerability VCID-vncw-7kq5-rkfj
36
vulnerability VCID-wgd1-9jtr-vfgj
37
vulnerability VCID-ygym-64en-vbav
38
vulnerability VCID-zvaq-2qbe-myhg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.1.1
aliases CVE-2018-0574, GHSA-6qjv-43mf-rgrh
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wg9h-rupq-xbea
41
url VCID-wgd1-9jtr-vfgj
vulnerability_id VCID-wgd1-9jtr-vfgj
summary baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the content management feature. Version 5.0.9 contains a fix for this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-26128
reference_id
reference_type
scores
0
value 0.02281
scoring_system epss
scoring_elements 0.8504
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-26128
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://github.com/baserproject/basercms/commit/18f426d63e752b4d22c40e9ea8d1f6e692ef601c
reference_id 18f426d63e752b4d22c40e9ea8d1f6e692ef601c
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-12T15:20:28Z/
url https://github.com/baserproject/basercms/commit/18f426d63e752b4d22c40e9ea8d1f6e692ef601c
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-26128
reference_id CVE-2024-26128
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-26128
4
reference_url https://github.com/advisories/GHSA-jjxq-m8h3-4vw5
reference_id GHSA-jjxq-m8h3-4vw5
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-jjxq-m8h3-4vw5
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-jjxq-m8h3-4vw5
reference_id GHSA-jjxq-m8h3-4vw5
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-12T15:20:28Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-jjxq-m8h3-4vw5
6
reference_url https://basercms.net/security/JVN_73283159
reference_id JVN_73283159
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-12T15:20:28Z/
url https://basercms.net/security/JVN_73283159
fixed_packages
0
url pkg:composer/baserproject/basercms@5.0.9
purl pkg:composer/baserproject/basercms@5.0.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-686s-gr1n-4qa9
2
vulnerability VCID-6p1v-g9d1-zfe5
3
vulnerability VCID-c77m-9mgg-c3ht
4
vulnerability VCID-cprt-rzws-tkgh
5
vulnerability VCID-cyb9-u781-tkar
6
vulnerability VCID-e1dn-at7q-t7fj
7
vulnerability VCID-f1qc-b1uy-uycf
8
vulnerability VCID-mkbe-t5bg-a3fz
9
vulnerability VCID-mnc6-6egy-jbhn
10
vulnerability VCID-pfj6-r4pn-wfhf
11
vulnerability VCID-py24-kt42-9kdy
12
vulnerability VCID-qv2s-xgym-v3bv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@5.0.9
aliases CVE-2024-26128, GHSA-jjxq-m8h3-4vw5
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wgd1-9jtr-vfgj
42
url VCID-ygym-64en-vbav
vulnerability_id VCID-ygym-64en-vbav
summary baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the site search feature. Version 5.0.9 contains a fix for this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-44379
reference_id
reference_type
scores
0
value 0.00622
scoring_system epss
scoring_elements 0.70612
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-44379
1
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
2
reference_url https://github.com/baserproject/basercms/commit/18549396e5a9b8294306a54a876af164b0b57da4
reference_id 18549396e5a9b8294306a54a876af164b0b57da4
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-22T16:39:22Z/
url https://github.com/baserproject/basercms/commit/18549396e5a9b8294306a54a876af164b0b57da4
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-44379
reference_id CVE-2023-44379
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-44379
4
reference_url https://github.com/advisories/GHSA-66c2-p8rh-qx87
reference_id GHSA-66c2-p8rh-qx87
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-66c2-p8rh-qx87
5
reference_url https://github.com/baserproject/basercms/security/advisories/GHSA-66c2-p8rh-qx87
reference_id GHSA-66c2-p8rh-qx87
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-22T16:39:22Z/
url https://github.com/baserproject/basercms/security/advisories/GHSA-66c2-p8rh-qx87
6
reference_url https://basercms.net/security/JVN_73283159
reference_id JVN_73283159
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-22T16:39:22Z/
url https://basercms.net/security/JVN_73283159
fixed_packages
0
url pkg:composer/baserproject/basercms@5.0.9
purl pkg:composer/baserproject/basercms@5.0.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1nef-kbvb-nqgv
1
vulnerability VCID-686s-gr1n-4qa9
2
vulnerability VCID-6p1v-g9d1-zfe5
3
vulnerability VCID-c77m-9mgg-c3ht
4
vulnerability VCID-cprt-rzws-tkgh
5
vulnerability VCID-cyb9-u781-tkar
6
vulnerability VCID-e1dn-at7q-t7fj
7
vulnerability VCID-f1qc-b1uy-uycf
8
vulnerability VCID-mkbe-t5bg-a3fz
9
vulnerability VCID-mnc6-6egy-jbhn
10
vulnerability VCID-pfj6-r4pn-wfhf
11
vulnerability VCID-py24-kt42-9kdy
12
vulnerability VCID-qv2s-xgym-v3bv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@5.0.9
aliases CVE-2023-44379, GHSA-66c2-p8rh-qx87
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ygym-64en-vbav
Fixing_vulnerabilities
0
url VCID-h5y8-xqq9-zbdk
vulnerability_id VCID-h5y8-xqq9-zbdk
summary
references
0
reference_url http://jvn.jp/en/jp/JVN78151490/index.html
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://jvn.jp/en/jp/JVN78151490/index.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-10844
reference_id
reference_type
scores
0
value 0.00568
scoring_system epss
scoring_elements 0.68992
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-10844
2
reference_url https://basercms.net/security/JVN78151490
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://basercms.net/security/JVN78151490
3
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-10844
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-10844
fixed_packages
0
url pkg:composer/baserproject/basercms@3.0.15
purl pkg:composer/baserproject/basercms@3.0.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7qsb-z8v2-zkhz
10
vulnerability VCID-7rv4-k7qe-vyds
11
vulnerability VCID-9hcb-zk3c-puga
12
vulnerability VCID-ambd-vx8w-y7b5
13
vulnerability VCID-c77m-9mgg-c3ht
14
vulnerability VCID-cknd-kv9u-sfdc
15
vulnerability VCID-cprt-rzws-tkgh
16
vulnerability VCID-cyb9-u781-tkar
17
vulnerability VCID-d1m5-npyb-93ba
18
vulnerability VCID-dfqh-8ekp-wbdz
19
vulnerability VCID-e1dn-at7q-t7fj
20
vulnerability VCID-e3g3-wbbd-k7fy
21
vulnerability VCID-e7n8-hhe7-5qhp
22
vulnerability VCID-f1qc-b1uy-uycf
23
vulnerability VCID-fw67-k8ej-57bf
24
vulnerability VCID-hmdp-y273-wqan
25
vulnerability VCID-kmfp-ar4u-5bdm
26
vulnerability VCID-m3jy-vamm-7qgq
27
vulnerability VCID-mkbe-t5bg-a3fz
28
vulnerability VCID-mnc6-6egy-jbhn
29
vulnerability VCID-pfj6-r4pn-wfhf
30
vulnerability VCID-py24-kt42-9kdy
31
vulnerability VCID-qk6g-muqe-hqfr
32
vulnerability VCID-qv2s-xgym-v3bv
33
vulnerability VCID-ra7y-cb5e-w7ee
34
vulnerability VCID-rzcn-4yzc-g3dy
35
vulnerability VCID-tjck-1ajy-ubb1
36
vulnerability VCID-tjg8-cmv3-43d8
37
vulnerability VCID-upvv-xbqd-9bcz
38
vulnerability VCID-vmf1-uj3x-5yg4
39
vulnerability VCID-vncw-7kq5-rkfj
40
vulnerability VCID-wg9h-rupq-xbea
41
vulnerability VCID-wgd1-9jtr-vfgj
42
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@3.0.15
1
url pkg:composer/baserproject/basercms@4.0.5.1
purl pkg:composer/baserproject/basercms@4.0.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7qsb-z8v2-zkhz
10
vulnerability VCID-7rv4-k7qe-vyds
11
vulnerability VCID-9hcb-zk3c-puga
12
vulnerability VCID-ambd-vx8w-y7b5
13
vulnerability VCID-c77m-9mgg-c3ht
14
vulnerability VCID-cknd-kv9u-sfdc
15
vulnerability VCID-cprt-rzws-tkgh
16
vulnerability VCID-cyb9-u781-tkar
17
vulnerability VCID-d1m5-npyb-93ba
18
vulnerability VCID-dfqh-8ekp-wbdz
19
vulnerability VCID-e1dn-at7q-t7fj
20
vulnerability VCID-e3g3-wbbd-k7fy
21
vulnerability VCID-e7n8-hhe7-5qhp
22
vulnerability VCID-f1qc-b1uy-uycf
23
vulnerability VCID-fw67-k8ej-57bf
24
vulnerability VCID-gfx3-at47-u7aq
25
vulnerability VCID-hmdp-y273-wqan
26
vulnerability VCID-kmfp-ar4u-5bdm
27
vulnerability VCID-m3jy-vamm-7qgq
28
vulnerability VCID-mkbe-t5bg-a3fz
29
vulnerability VCID-mnc6-6egy-jbhn
30
vulnerability VCID-pfj6-r4pn-wfhf
31
vulnerability VCID-py24-kt42-9kdy
32
vulnerability VCID-qk6g-muqe-hqfr
33
vulnerability VCID-qv2s-xgym-v3bv
34
vulnerability VCID-ra7y-cb5e-w7ee
35
vulnerability VCID-rzcn-4yzc-g3dy
36
vulnerability VCID-tf16-deep-v3bs
37
vulnerability VCID-tjck-1ajy-ubb1
38
vulnerability VCID-tjg8-cmv3-43d8
39
vulnerability VCID-upvv-xbqd-9bcz
40
vulnerability VCID-vmf1-uj3x-5yg4
41
vulnerability VCID-vncw-7kq5-rkfj
42
vulnerability VCID-wg9h-rupq-xbea
43
vulnerability VCID-wgd1-9jtr-vfgj
44
vulnerability VCID-ygym-64en-vbav
45
vulnerability VCID-zvaq-2qbe-myhg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.0.5.1
2
url pkg:composer/baserproject/basercms@4.0.6
purl pkg:composer/baserproject/basercms@4.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7qsb-z8v2-zkhz
10
vulnerability VCID-7rv4-k7qe-vyds
11
vulnerability VCID-9hcb-zk3c-puga
12
vulnerability VCID-ambd-vx8w-y7b5
13
vulnerability VCID-c77m-9mgg-c3ht
14
vulnerability VCID-cknd-kv9u-sfdc
15
vulnerability VCID-cprt-rzws-tkgh
16
vulnerability VCID-cyb9-u781-tkar
17
vulnerability VCID-d1m5-npyb-93ba
18
vulnerability VCID-dfqh-8ekp-wbdz
19
vulnerability VCID-e1dn-at7q-t7fj
20
vulnerability VCID-e3g3-wbbd-k7fy
21
vulnerability VCID-e7n8-hhe7-5qhp
22
vulnerability VCID-f1qc-b1uy-uycf
23
vulnerability VCID-fw67-k8ej-57bf
24
vulnerability VCID-gfx3-at47-u7aq
25
vulnerability VCID-hmdp-y273-wqan
26
vulnerability VCID-kmfp-ar4u-5bdm
27
vulnerability VCID-m3jy-vamm-7qgq
28
vulnerability VCID-mkbe-t5bg-a3fz
29
vulnerability VCID-mnc6-6egy-jbhn
30
vulnerability VCID-pfj6-r4pn-wfhf
31
vulnerability VCID-py24-kt42-9kdy
32
vulnerability VCID-qk6g-muqe-hqfr
33
vulnerability VCID-qv2s-xgym-v3bv
34
vulnerability VCID-ra7y-cb5e-w7ee
35
vulnerability VCID-rzcn-4yzc-g3dy
36
vulnerability VCID-tf16-deep-v3bs
37
vulnerability VCID-tjck-1ajy-ubb1
38
vulnerability VCID-tjg8-cmv3-43d8
39
vulnerability VCID-upvv-xbqd-9bcz
40
vulnerability VCID-vmf1-uj3x-5yg4
41
vulnerability VCID-vncw-7kq5-rkfj
42
vulnerability VCID-wg9h-rupq-xbea
43
vulnerability VCID-wgd1-9jtr-vfgj
44
vulnerability VCID-ygym-64en-vbav
45
vulnerability VCID-zvaq-2qbe-myhg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.0.6
aliases CVE-2017-10844, GHSA-69gw-v5ph-6vxq
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h5y8-xqq9-zbdk
1
url VCID-her4-2hxs-bbbw
vulnerability_id VCID-her4-2hxs-bbbw
summary Arbitrary file delete in baserCMS
references
0
reference_url http://jvn.jp/en/jp/JVN78151490/index.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://jvn.jp/en/jp/JVN78151490/index.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-10843
reference_id
reference_type
scores
0
value 0.0057
scoring_system epss
scoring_elements 0.69079
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-10843
2
reference_url https://basercms.net/security/JVN78151490
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://basercms.net/security/JVN78151490
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-10843
reference_id CVE-2017-10843
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-10843
4
reference_url https://github.com/advisories/GHSA-x73x-7gmx-w835
reference_id GHSA-x73x-7gmx-w835
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-x73x-7gmx-w835
fixed_packages
0
url pkg:composer/baserproject/basercms@3.0.15
purl pkg:composer/baserproject/basercms@3.0.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7qsb-z8v2-zkhz
10
vulnerability VCID-7rv4-k7qe-vyds
11
vulnerability VCID-9hcb-zk3c-puga
12
vulnerability VCID-ambd-vx8w-y7b5
13
vulnerability VCID-c77m-9mgg-c3ht
14
vulnerability VCID-cknd-kv9u-sfdc
15
vulnerability VCID-cprt-rzws-tkgh
16
vulnerability VCID-cyb9-u781-tkar
17
vulnerability VCID-d1m5-npyb-93ba
18
vulnerability VCID-dfqh-8ekp-wbdz
19
vulnerability VCID-e1dn-at7q-t7fj
20
vulnerability VCID-e3g3-wbbd-k7fy
21
vulnerability VCID-e7n8-hhe7-5qhp
22
vulnerability VCID-f1qc-b1uy-uycf
23
vulnerability VCID-fw67-k8ej-57bf
24
vulnerability VCID-hmdp-y273-wqan
25
vulnerability VCID-kmfp-ar4u-5bdm
26
vulnerability VCID-m3jy-vamm-7qgq
27
vulnerability VCID-mkbe-t5bg-a3fz
28
vulnerability VCID-mnc6-6egy-jbhn
29
vulnerability VCID-pfj6-r4pn-wfhf
30
vulnerability VCID-py24-kt42-9kdy
31
vulnerability VCID-qk6g-muqe-hqfr
32
vulnerability VCID-qv2s-xgym-v3bv
33
vulnerability VCID-ra7y-cb5e-w7ee
34
vulnerability VCID-rzcn-4yzc-g3dy
35
vulnerability VCID-tjck-1ajy-ubb1
36
vulnerability VCID-tjg8-cmv3-43d8
37
vulnerability VCID-upvv-xbqd-9bcz
38
vulnerability VCID-vmf1-uj3x-5yg4
39
vulnerability VCID-vncw-7kq5-rkfj
40
vulnerability VCID-wg9h-rupq-xbea
41
vulnerability VCID-wgd1-9jtr-vfgj
42
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@3.0.15
1
url pkg:composer/baserproject/basercms@4.0.5.1
purl pkg:composer/baserproject/basercms@4.0.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7qsb-z8v2-zkhz
10
vulnerability VCID-7rv4-k7qe-vyds
11
vulnerability VCID-9hcb-zk3c-puga
12
vulnerability VCID-ambd-vx8w-y7b5
13
vulnerability VCID-c77m-9mgg-c3ht
14
vulnerability VCID-cknd-kv9u-sfdc
15
vulnerability VCID-cprt-rzws-tkgh
16
vulnerability VCID-cyb9-u781-tkar
17
vulnerability VCID-d1m5-npyb-93ba
18
vulnerability VCID-dfqh-8ekp-wbdz
19
vulnerability VCID-e1dn-at7q-t7fj
20
vulnerability VCID-e3g3-wbbd-k7fy
21
vulnerability VCID-e7n8-hhe7-5qhp
22
vulnerability VCID-f1qc-b1uy-uycf
23
vulnerability VCID-fw67-k8ej-57bf
24
vulnerability VCID-gfx3-at47-u7aq
25
vulnerability VCID-hmdp-y273-wqan
26
vulnerability VCID-kmfp-ar4u-5bdm
27
vulnerability VCID-m3jy-vamm-7qgq
28
vulnerability VCID-mkbe-t5bg-a3fz
29
vulnerability VCID-mnc6-6egy-jbhn
30
vulnerability VCID-pfj6-r4pn-wfhf
31
vulnerability VCID-py24-kt42-9kdy
32
vulnerability VCID-qk6g-muqe-hqfr
33
vulnerability VCID-qv2s-xgym-v3bv
34
vulnerability VCID-ra7y-cb5e-w7ee
35
vulnerability VCID-rzcn-4yzc-g3dy
36
vulnerability VCID-tf16-deep-v3bs
37
vulnerability VCID-tjck-1ajy-ubb1
38
vulnerability VCID-tjg8-cmv3-43d8
39
vulnerability VCID-upvv-xbqd-9bcz
40
vulnerability VCID-vmf1-uj3x-5yg4
41
vulnerability VCID-vncw-7kq5-rkfj
42
vulnerability VCID-wg9h-rupq-xbea
43
vulnerability VCID-wgd1-9jtr-vfgj
44
vulnerability VCID-ygym-64en-vbav
45
vulnerability VCID-zvaq-2qbe-myhg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.0.5.1
2
url pkg:composer/baserproject/basercms@4.0.6
purl pkg:composer/baserproject/basercms@4.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7qsb-z8v2-zkhz
10
vulnerability VCID-7rv4-k7qe-vyds
11
vulnerability VCID-9hcb-zk3c-puga
12
vulnerability VCID-ambd-vx8w-y7b5
13
vulnerability VCID-c77m-9mgg-c3ht
14
vulnerability VCID-cknd-kv9u-sfdc
15
vulnerability VCID-cprt-rzws-tkgh
16
vulnerability VCID-cyb9-u781-tkar
17
vulnerability VCID-d1m5-npyb-93ba
18
vulnerability VCID-dfqh-8ekp-wbdz
19
vulnerability VCID-e1dn-at7q-t7fj
20
vulnerability VCID-e3g3-wbbd-k7fy
21
vulnerability VCID-e7n8-hhe7-5qhp
22
vulnerability VCID-f1qc-b1uy-uycf
23
vulnerability VCID-fw67-k8ej-57bf
24
vulnerability VCID-gfx3-at47-u7aq
25
vulnerability VCID-hmdp-y273-wqan
26
vulnerability VCID-kmfp-ar4u-5bdm
27
vulnerability VCID-m3jy-vamm-7qgq
28
vulnerability VCID-mkbe-t5bg-a3fz
29
vulnerability VCID-mnc6-6egy-jbhn
30
vulnerability VCID-pfj6-r4pn-wfhf
31
vulnerability VCID-py24-kt42-9kdy
32
vulnerability VCID-qk6g-muqe-hqfr
33
vulnerability VCID-qv2s-xgym-v3bv
34
vulnerability VCID-ra7y-cb5e-w7ee
35
vulnerability VCID-rzcn-4yzc-g3dy
36
vulnerability VCID-tf16-deep-v3bs
37
vulnerability VCID-tjck-1ajy-ubb1
38
vulnerability VCID-tjg8-cmv3-43d8
39
vulnerability VCID-upvv-xbqd-9bcz
40
vulnerability VCID-vmf1-uj3x-5yg4
41
vulnerability VCID-vncw-7kq5-rkfj
42
vulnerability VCID-wg9h-rupq-xbea
43
vulnerability VCID-wgd1-9jtr-vfgj
44
vulnerability VCID-ygym-64en-vbav
45
vulnerability VCID-zvaq-2qbe-myhg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.0.6
aliases CVE-2017-10843, GHSA-x73x-7gmx-w835
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-her4-2hxs-bbbw
2
url VCID-t8zy-hpr1-1ycy
vulnerability_id VCID-t8zy-hpr1-1ycy
summary
references
0
reference_url http://jvn.jp/en/jp/JVN78151490/index.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://jvn.jp/en/jp/JVN78151490/index.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-10842
reference_id
reference_type
scores
0
value 0.0067
scoring_system epss
scoring_elements 0.71827
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-10842
2
reference_url https://basercms.net/security/JVN78151490
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://basercms.net/security/JVN78151490
3
reference_url https://github.com/baserproject/basercms
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/baserproject/basercms
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-10842
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-10842
fixed_packages
0
url pkg:composer/baserproject/basercms@3.0.15
purl pkg:composer/baserproject/basercms@3.0.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7qsb-z8v2-zkhz
10
vulnerability VCID-7rv4-k7qe-vyds
11
vulnerability VCID-9hcb-zk3c-puga
12
vulnerability VCID-ambd-vx8w-y7b5
13
vulnerability VCID-c77m-9mgg-c3ht
14
vulnerability VCID-cknd-kv9u-sfdc
15
vulnerability VCID-cprt-rzws-tkgh
16
vulnerability VCID-cyb9-u781-tkar
17
vulnerability VCID-d1m5-npyb-93ba
18
vulnerability VCID-dfqh-8ekp-wbdz
19
vulnerability VCID-e1dn-at7q-t7fj
20
vulnerability VCID-e3g3-wbbd-k7fy
21
vulnerability VCID-e7n8-hhe7-5qhp
22
vulnerability VCID-f1qc-b1uy-uycf
23
vulnerability VCID-fw67-k8ej-57bf
24
vulnerability VCID-hmdp-y273-wqan
25
vulnerability VCID-kmfp-ar4u-5bdm
26
vulnerability VCID-m3jy-vamm-7qgq
27
vulnerability VCID-mkbe-t5bg-a3fz
28
vulnerability VCID-mnc6-6egy-jbhn
29
vulnerability VCID-pfj6-r4pn-wfhf
30
vulnerability VCID-py24-kt42-9kdy
31
vulnerability VCID-qk6g-muqe-hqfr
32
vulnerability VCID-qv2s-xgym-v3bv
33
vulnerability VCID-ra7y-cb5e-w7ee
34
vulnerability VCID-rzcn-4yzc-g3dy
35
vulnerability VCID-tjck-1ajy-ubb1
36
vulnerability VCID-tjg8-cmv3-43d8
37
vulnerability VCID-upvv-xbqd-9bcz
38
vulnerability VCID-vmf1-uj3x-5yg4
39
vulnerability VCID-vncw-7kq5-rkfj
40
vulnerability VCID-wg9h-rupq-xbea
41
vulnerability VCID-wgd1-9jtr-vfgj
42
vulnerability VCID-ygym-64en-vbav
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@3.0.15
1
url pkg:composer/baserproject/basercms@4.0.5.1
purl pkg:composer/baserproject/basercms@4.0.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7qsb-z8v2-zkhz
10
vulnerability VCID-7rv4-k7qe-vyds
11
vulnerability VCID-9hcb-zk3c-puga
12
vulnerability VCID-ambd-vx8w-y7b5
13
vulnerability VCID-c77m-9mgg-c3ht
14
vulnerability VCID-cknd-kv9u-sfdc
15
vulnerability VCID-cprt-rzws-tkgh
16
vulnerability VCID-cyb9-u781-tkar
17
vulnerability VCID-d1m5-npyb-93ba
18
vulnerability VCID-dfqh-8ekp-wbdz
19
vulnerability VCID-e1dn-at7q-t7fj
20
vulnerability VCID-e3g3-wbbd-k7fy
21
vulnerability VCID-e7n8-hhe7-5qhp
22
vulnerability VCID-f1qc-b1uy-uycf
23
vulnerability VCID-fw67-k8ej-57bf
24
vulnerability VCID-gfx3-at47-u7aq
25
vulnerability VCID-hmdp-y273-wqan
26
vulnerability VCID-kmfp-ar4u-5bdm
27
vulnerability VCID-m3jy-vamm-7qgq
28
vulnerability VCID-mkbe-t5bg-a3fz
29
vulnerability VCID-mnc6-6egy-jbhn
30
vulnerability VCID-pfj6-r4pn-wfhf
31
vulnerability VCID-py24-kt42-9kdy
32
vulnerability VCID-qk6g-muqe-hqfr
33
vulnerability VCID-qv2s-xgym-v3bv
34
vulnerability VCID-ra7y-cb5e-w7ee
35
vulnerability VCID-rzcn-4yzc-g3dy
36
vulnerability VCID-tf16-deep-v3bs
37
vulnerability VCID-tjck-1ajy-ubb1
38
vulnerability VCID-tjg8-cmv3-43d8
39
vulnerability VCID-upvv-xbqd-9bcz
40
vulnerability VCID-vmf1-uj3x-5yg4
41
vulnerability VCID-vncw-7kq5-rkfj
42
vulnerability VCID-wg9h-rupq-xbea
43
vulnerability VCID-wgd1-9jtr-vfgj
44
vulnerability VCID-ygym-64en-vbav
45
vulnerability VCID-zvaq-2qbe-myhg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.0.5.1
2
url pkg:composer/baserproject/basercms@4.0.6
purl pkg:composer/baserproject/basercms@4.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19n8-vups-cyg8
1
vulnerability VCID-1nef-kbvb-nqgv
2
vulnerability VCID-2c9a-4k3v-1ydj
3
vulnerability VCID-3btn-6dkf-67aq
4
vulnerability VCID-3jx2-hpuj-afaf
5
vulnerability VCID-46uc-rvvt-5ke8
6
vulnerability VCID-686s-gr1n-4qa9
7
vulnerability VCID-6p1v-g9d1-zfe5
8
vulnerability VCID-6yw8-d6jx-ykcm
9
vulnerability VCID-7qsb-z8v2-zkhz
10
vulnerability VCID-7rv4-k7qe-vyds
11
vulnerability VCID-9hcb-zk3c-puga
12
vulnerability VCID-ambd-vx8w-y7b5
13
vulnerability VCID-c77m-9mgg-c3ht
14
vulnerability VCID-cknd-kv9u-sfdc
15
vulnerability VCID-cprt-rzws-tkgh
16
vulnerability VCID-cyb9-u781-tkar
17
vulnerability VCID-d1m5-npyb-93ba
18
vulnerability VCID-dfqh-8ekp-wbdz
19
vulnerability VCID-e1dn-at7q-t7fj
20
vulnerability VCID-e3g3-wbbd-k7fy
21
vulnerability VCID-e7n8-hhe7-5qhp
22
vulnerability VCID-f1qc-b1uy-uycf
23
vulnerability VCID-fw67-k8ej-57bf
24
vulnerability VCID-gfx3-at47-u7aq
25
vulnerability VCID-hmdp-y273-wqan
26
vulnerability VCID-kmfp-ar4u-5bdm
27
vulnerability VCID-m3jy-vamm-7qgq
28
vulnerability VCID-mkbe-t5bg-a3fz
29
vulnerability VCID-mnc6-6egy-jbhn
30
vulnerability VCID-pfj6-r4pn-wfhf
31
vulnerability VCID-py24-kt42-9kdy
32
vulnerability VCID-qk6g-muqe-hqfr
33
vulnerability VCID-qv2s-xgym-v3bv
34
vulnerability VCID-ra7y-cb5e-w7ee
35
vulnerability VCID-rzcn-4yzc-g3dy
36
vulnerability VCID-tf16-deep-v3bs
37
vulnerability VCID-tjck-1ajy-ubb1
38
vulnerability VCID-tjg8-cmv3-43d8
39
vulnerability VCID-upvv-xbqd-9bcz
40
vulnerability VCID-vmf1-uj3x-5yg4
41
vulnerability VCID-vncw-7kq5-rkfj
42
vulnerability VCID-wg9h-rupq-xbea
43
vulnerability VCID-wgd1-9jtr-vfgj
44
vulnerability VCID-ygym-64en-vbav
45
vulnerability VCID-zvaq-2qbe-myhg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@4.0.6
aliases CVE-2017-10842, GHSA-jc94-wp59-pq4f
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-t8zy-hpr1-1ycy
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/baserproject/basercms@3.0.15