Composer baserproject/basercms has 56 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2021-20682 | OS Command Injection in baserCMS | high | 7.2 | <4.4.5 | 4.4.5 |
| CVE-2018-18942 | RCE in baserCMS before 4.1.4 | high | 7.2 | <4.1.4 | 4.1.4 |
| CVE-2026-21861 | baserCMS has OS Command Injection Leading to Remote Code Execution (RCE) | critical | 9.1 | <5.2.3 | 5.2.3 |
| CVE-2020-15277 | Edit template, Remote Code Execution (RCE) Vulnerability in Latest Release 4.4.0 | high | 7.2 | >=4.4.0 and <4.4.1 | 4.4.1 |
| CVE-2021-41243 | OS Command Injection Vulnerability and Potential Zip Slip Vulnerability in baserCMS | critical | 9.1 | <4.5.4 | 4.5.4 |
| CVE-2020-15159 | Cross Site Scripting and RCE in baserCMS | high | 7.6 | >=4.0.0 and <4.3.7 | 4.3.7 |
| CVE-2026-30880 | baserCMS has OS command injection vulnerability in installer | critical | 0.0 | <5.2.3 | 5.2.3 |
| CVE-2017-10842 | baserCMS SQL Injection vulnerability | critical | 9.8 | <3.0.15 or >=4.0.0 and <4.0.6 | 3.0.15, 4.0.6 |
| CVE-2018-0572 | baserCMS vulnerable to Access Control Bypass | high | 8.1 | >=4.0.0 and <4.1.1 or <3.0.16 | 4.1.1, 3.0.16 |
| CVE-2021-41279 | Potential Zip Slip Vulnerability in baserCMS | high | 7.7 | <4.5.4 | 4.5.4 |
| CVE-2015-5640 | baserCMS Access Control Bypass | medium | 0.0 | <3.0.8 | 3.0.8 |
| CVE-2026-30877 | baserCMS Update Functionality Vulnerable to OS Command Injection | critical | 9.1 | <5.2.3 | 5.2.3 |
| CVE-2023-25654 | baserCMS File Uploader Remote Code Execution (RCE) vulnerability | critical | 9.8 | <4.7.5 | 4.7.5 |
| CVE-2018-0569 | OS Command Injection in baserCMS | high | 8.8 | >=4.0.0 and <=4.1.0.1 or <=3.0.15 | – |
| CVE-2017-10844 | Code Injection in baserCMS | high | 8.8 | <=3.0.14 or >=4.0.0 and <=4.0.5 | – |
| CVE-2023-51450 | baserCMS OS command injection vulnerability in Installer | medium | 5.6 | <5.0.9 | 5.0.9 |
| CVE-2017-10843 | Arbitrary file delete in baserCMS | high | 7.5 | <3.0.15 or >=4.0.0 and <4.0.6 | 3.0.15, 4.0.6 |
| CVE-2011-2674 | BaserCMS privilege escallation | medium | 0.0 | <1.6.12 | 1.6.12 |
| CVE-2020-15155 | Cross Site Scripting(XSS) Vulnerability in Latest Release 4.3.6 Site basic settings | high | 7.3 | >=4.0.0 and <4.3.7 | 4.3.7 |
| CVE-2023-43648 | baserCMS Directory Traversal vulnerability in Form submission data management Feature | medium | 4.9 | <4.8.0 | 4.8.0 |
| CVE-2018-0575 | Sensitive Data Exposure in baserCMS | medium | 5.3 | >=4.0.0 and <=4.1.0.1 or <=3.0.15 | – |
| CVE-2018-0571 | baserCMS arbitrary file upload vulnerability | medium | 4.3 | >=4.0.0 and <4.1.1 or <3.0.16 | 4.1.1, 3.0.16 |
| CVE-2018-0573 | baserCMS Access Control Bypass | medium | 5.3 | <3.0.16 or >=4.0.0 and <4.1.1 | 3.0.16, 4.1.1 |
| CVE-2023-25655 | baserCMS allows any file to be uploaded | critical | 9.8 | <4.7.5 | 4.7.5 |
| CVE-2026-30940 | baserCMS Path Traversal Leads to Arbitrary File Write and RCE via Theme File API | high | 7.2 | <5.2.3 | 5.2.3 |
| CVE-2020-15273 | Edit feed settings and others, Cross Site Scripting(XSS) Vulnerability in Latest Release 4.4.0 | high | 7.3 | >=4.4.0 and <4.4.1 | 4.4.1 |
| CVE-2020-15154 | Cross Site Scripting in baserCMS | high | 7.3 | >=4.0.0 and <4.3.7 | 4.3.7 |
| CVE-2020-15276 | Blog comment posting, Cross Site Scripting(XSS) Vulnerability in Latest Release 4.4.0 | high | 7.7 | >=4.4.0 and <4.4.1 | 4.4.1 |
| CVE-2016-4878 | baserCMS Cross Site Request Forgery vulnerability | high | 8.8 | <3.0.11 | 3.0.11 |
| CVE-2016-4881 | CSRF in baserCMS 3.0.10 and earlier | high | 8.8 | <3.0.11 | 3.0.11 |
| CVE-2021-39136 | Cross-site scripting vulnerability in file upload | high | 8.7 | <4.5.1 | 4.5.1 |
| CVE-2016-4880 | baserCMS Cross-site Scripting vulnerability | medium | 5.4 | <3.0.11 | 3.0.11 |
| CVE-2016-4879 | CSRF in baserCMS 3.0.10 and earlier | high | 8.8 | <=3.0.10 | – |
| CVE-2018-0574 | XSS in baserCMS | medium | 6.1 | >=4.0.0 and <=4.1.0.1 or <=3.0.15 | – |
| CVE-2021-20681 | Cross-site Scripting (XSS) in baserCMS | medium | 5.4 | <4.4.5 | 4.4.5 |
| CVE-2021-20683 | Cross-site Scripting (XSS) in baserCMS | medium | 5.4 | <4.4.5 | 4.4.5 |
| CVE-2018-18943 | XSS in baserCMS before 4.1.4 | medium | 4.8 | <4.1.4 | 4.1.4 |
| CVE-2018-0570 | XSS in baserCMS | medium | 5.4 | >=4.0.0 and <=4.1.0.1 or <=3.0.15 | – |
| CVE-2023-43792 | baserCMS Code Injection Vulnerability in Mail Form Feature | medium | 5.3 | >=4.6.0 and <=4.7.6 | – |
| CVE-2022-41994 | baserCMS vulnerable to stored Cross-site Scripting | medium | 4.8 | <4.7.2 | 4.7.2 |
| CVE-2022-42486 | baserCMS vulnerable to stored Cross-site Scripting | medium | 4.8 | <4.7.2 | 4.7.2 |
| CVE-2023-43647 | baserCMS Cross-site Scripting vulnerability in File upload Feature | medium | 6.1 | <4.8.0 | 4.8.0 |
| CVE-2022-39325 | baserproject/basercms vulnerable to cross-site scripting (XSS) vulnerability | medium | 4.6 | <4.7.2 | 4.7.2 |
| CVE-2025-32957 | baserCMS has Unsafe File Upload Leading to Remote Code Execution (RCE) | high | 8.7 | <5.2.3 | 5.2.3 |
| CVE-2024-26128 | baserCMS Cross-site Scripting vulnerability in Content Management | medium | 5.4 | <5.0.9 | 5.0.9 |
| CVE-2023-29009 | baserCMS Cross-site Scripting Vulnerability in Favorites Feature | medium | 6.1 | <4.8.0 | 4.8.0 |
| CVE-2023-44379 | baserCMS Cross-site Scripting vulnerability in Site search Feature | medium | 6.1 | <5.0.9 | 5.0.9 |
| CVE-2026-27697 | baserCMS has an SQL injection vulnerability in its blog post functionality | medium | 0.0 | <5.2.3 | 5.2.3 |
| CVE-2023-43649 | baserCMS CSRF vulnerability in Content preview Feature | medium | 4.7 | <4.8.0 | 4.8.0 |
| CVE-2026-30878 | baserCMS has Mail Form Acceptance Bypass via Public API | medium | 5.3 | <5.2.3 | 5.2.3 |
| CVE-2024-46998 | baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature | high | 7.1 | <5.1.2 | 5.1.2 |
| CVE-2024-46995 | baserCMS has a Cross-site Scripting (XSS) Vulnerability in HTTP 400 Bad Request | medium | 6.1 | <5.1.2 | 5.1.2 |
| CVE-2024-46996 | baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature | medium | 6.3 | <5.1.2 | 5.1.2 |
| CVE-2024-46994 | baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts and Contents list Feature | medium | 5.4 | <5.1.2 | 5.1.2 |
| CVE-2026-32734 | baserCMS is Vulnerable to Cross-site Scripting | high | 7.1 | <5.2.3 | 5.2.3 |
| CVE-2026-30879 | baserCMS has a cross-site scripting vulnerability in blog posts | medium | 0.0 | <5.2.3 | 5.2.3 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked