Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-xxud-7jsh-bbc1
Vulnerability ID VCID-xxud-7jsh-bbc1
Aliases CVE-2020-15277
GHSA-6fmv-q269-55cw
Summary Unrestricted Upload of File with Dangerous Type baserCMS Code may be executed by logging in as a system administrator and uploading an executable script file such as a PHP file. The `Edit template` component was found to be vulnerable.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-434 Unrestricted Upload of File with Dangerous Type
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
System Score Found at
epss 0.03225 https://api.first.org/data/v1/epss?cve=CVE-2020-15277
cvssv3.1 7.2 https://basercms.net/security/20201029
generic_textual HIGH https://basercms.net/security/20201029
cvssv3.1 7.2 https://github.com/baserproject/basercms/commit/bb027c3967b0430adcff2d2fedbc23d39077563b
generic_textual HIGH https://github.com/baserproject/basercms/commit/bb027c3967b0430adcff2d2fedbc23d39077563b
cvssv3.1 7.2 https://github.com/baserproject/basercms/security/advisories/GHSA-6fmv-q269-55cw
generic_textual HIGH https://github.com/baserproject/basercms/security/advisories/GHSA-6fmv-q269-55cw
cvssv3.1 7.2 https://nvd.nist.gov/vuln/detail/CVE-2020-15277
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2020-15277
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2020-15277
https://basercms.net/security/20201029
https://github.com/baserproject/basercms/commit/bb027c3967b0430adcff2d2fedbc23d39077563b
https://github.com/baserproject/basercms/security/advisories/GHSA-6fmv-q269-55cw
CVE-2020-15277 https://nvd.nist.gov/vuln/detail/CVE-2020-15277
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://basercms.net/security/20201029
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/baserproject/basercms/commit/bb027c3967b0430adcff2d2fedbc23d39077563b
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/baserproject/basercms/security/advisories/GHSA-6fmv-q269-55cw
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2020-15277
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.87299
EPSS Score 0.03225
Published At June 4, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T16:20:34.205234+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/baserproject/basercms/CVE-2020-15277.yml 38.6.0