Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-tf16-deep-v3bs
Vulnerability ID VCID-tf16-deep-v3bs
Aliases CVE-2020-15277
GHSA-6fmv-q269-55cw
Summary Edit template, Remote Code Execution (RCE) Vulnerability in Latest Release 4.4.0
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CWE-434 Unrestricted Upload of File with Dangerous Type
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.03225 https://api.first.org/data/v1/epss?cve=CVE-2020-15277
epss 0.03225 https://api.first.org/data/v1/epss?cve=CVE-2020-15277
epss 0.03225 https://api.first.org/data/v1/epss?cve=CVE-2020-15277
cvssv3.1 7.2 https://basercms.net/security/20201029
generic_textual HIGH https://basercms.net/security/20201029
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-6fmv-q269-55cw
cvssv3.1 7.2 https://github.com/baserproject/basercms/commit/bb027c3967b0430adcff2d2fedbc23d39077563b
generic_textual HIGH https://github.com/baserproject/basercms/commit/bb027c3967b0430adcff2d2fedbc23d39077563b
cvssv3.1 7.2 https://github.com/baserproject/basercms/security/advisories/GHSA-6fmv-q269-55cw
cvssv3.1_qr HIGH https://github.com/baserproject/basercms/security/advisories/GHSA-6fmv-q269-55cw
generic_textual HIGH https://github.com/baserproject/basercms/security/advisories/GHSA-6fmv-q269-55cw
cvssv3.1 7.2 https://nvd.nist.gov/vuln/detail/CVE-2020-15277
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2020-15277
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2020-15277
https://basercms.net/security/20201029
https://github.com/baserproject/basercms/commit/bb027c3967b0430adcff2d2fedbc23d39077563b
CVE-2020-15277 https://nvd.nist.gov/vuln/detail/CVE-2020-15277
GHSA-6fmv-q269-55cw https://github.com/advisories/GHSA-6fmv-q269-55cw
GHSA-6fmv-q269-55cw https://github.com/baserproject/basercms/security/advisories/GHSA-6fmv-q269-55cw
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://basercms.net/security/20201029
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/baserproject/basercms/commit/bb027c3967b0430adcff2d2fedbc23d39077563b
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/baserproject/basercms/security/advisories/GHSA-6fmv-q269-55cw
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2020-15277
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.87348
EPSS Score 0.03225
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T20:27:05.796459+00:00 GHSA Importer Import https://github.com/advisories/GHSA-6fmv-q269-55cw 38.6.0