Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| High | 8.5 | CVE-2026-115481 |
baserCMS is a website development framework
baserproject, baserCMSbaserproject basercms, baserCMS
|
NVD | |||
|
CVE-2026-115481baserCMS is a website development framework
Executive summaryThe advisory describes a change to baserCMS, a website development framework, that alters how plugins are installed and what access rules are created for them. The diff shows that plugins without a permission definition previously received full access for all user groups by default, and the change makes that default restricted to administrators. The advisory does not describe the severity, a CVSS score, or a specific vendor recommendation beyond the code change itself. Technical summaryThe diff changes the default value of the permission parameter from true to false in the plugin install API controller and in the plugin configuration table, and it adds a check so that plugins without config/permission.php get full-access rules only when explicitly chosen during installation. The underlying weakness is an insecure default that grants broad access to non-administrator user groups. The advisory does not state the vulnerability class, CVSS score, attack preconditions, affected version range, fixed version, workarounds, or detection guidance, and it does not explicitly say that the issue is exploitable in the wild. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/baserproject/basercms/commit…5572e0e77173c1f1fdb5 Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 5.3 | CVE-2026-115480 |
baserCMS is a website development framework
baserproject, baserCMSbaserproject basercms, baserCMS bc-mail
|
NVD | |||
|
CVE-2026-115480baserCMS is a website development framework
Executive summaryThe baserCMS mail form plugin (bc-mail) had a fix added that enforces image captcha verification on mail form submissions, where the form's captcha setting was not being checked by the API endpoint. The advisory provided does not state a severity rating or the affected and fixed version numbers. The advisory text does not state any vendor recommendation beyond the code change shown. Technical summaryThe advisory shows a diff to plugins/bc-mail/src/Controller/Api/MailMessagesController.php that adds a check of the auth_captcha setting and a call to BcCaptchaServiceInterface::check before a mail message is created, and it adds integration tests for this behavior. The underlying vulnerability class, such as missing captcha enforcement or bot abuse, is implied by the diff but not named in the advisory. Attack vector, preconditions for exploitation, affected version range, fixed version number, workarounds, and detection guidance are not stated. The advisory also does not state a CVSS score or whether the issue is exploited in the wild. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/baserproject/basercms/commit…91e54459248f866dcf61 Impact if exploitedConfidentialityNone IntegrityLow AvailabilityNone
How it is exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 5.3 | CVE-2026-115479 |
baserCMS is a website development framework
baserproject, baserCMSbaserproject basercms, baserCMS
|
NVD | |||
|
CVE-2026-115479baserCMS is a website development framework
Executive summaryThe advisory describes a fix in baserCMS, a website development framework, for a flaw in its mail plugin (bc-mail) that let form submitters direct automatic reply emails to arbitrary addresses, including multiple comma-separated addresses, which could be abused to relay mail to third parties. The advisory does not state a severity rating. The fix changes the code to accept only a single valid email address from fields of type email and to validate those fields, but the advisory does not state affected or fixed version numbers or any workaround. Technical summaryThe change is in the bc-mail plugin, MailMessagesTable.php and MailFrontService.php. Before the fix, the automatic reply recipient fell back to the email or email_1 POST values even when they were not defined form fields, and non-email field types were accepted without format checks, letting a submitter choose arbitrary recipients and relay mail. The fix limits the recipient to fields of type email, trims the value, rejects anything that fails Validation::email, and adds email format validation for email-type fields. The advisory does not state affected or fixed version numbers, a CVSS score, a CWE, exploitation status, or a workaround, and no detection guidance is given beyond the referenced GHSA identifier in the commit text. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/baserproject/basercms/commit…351defcb9fb37f69daf1 Impact if exploitedConfidentialityNone IntegrityLow AvailabilityNone
How it is exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.1 | CVE-2026-115457 |
baserCMS is a website development framework
baserproject, baserCMSbaserproject basercms, baserCMS, baserCMS bc-blog, baserCMS baser-core
|
NVD | |||
|
CVE-2026-115457baserCMS is a website development framework
Executive summaryThe advisory describes a set of code changes to baserCMS, a website development framework, that address shortcode injection and loading of arbitrary scripts through shortcode arguments. The advisory text provided does not state a severity rating or a CVSS score, and it does not name a fixed release version. The vendor's recommendation is not stated beyond the code changes shown. Technical summaryThe changes add a notContainsShortCode validator in BcValidation and apply it to the name and message fields of blog comments in bc-blog, so that visitor input containing registered shortcodes is rejected. A second change in BcGoogleMapsHelper restricts the apiBaseUrl value to Google Maps hosts and URL-encodes the API key, preventing shortcode arguments from loading arbitrary script URLs. The advisory does not state affected or fixed version numbers, a CVSS score, an attack vector rating, or whether exploitation has occurred. No workarounds or detection guidance are stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/baserproject/basercms/commit…da7ae67d2dd0ad964eec Impact if exploitedConfidentialityHigh IntegrityLow AvailabilityNone
How it is exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N AffectsbaserprojectbaserCMSbaserproject basercmsbaserCMSbaserCMS bc-blogbaserCMS baser-core
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.2 | CVE-2026-114624 |
baserCMS is a website development framework
baserproject, baserCMSbaserproject basercms, baserCMS baser-core, baserCMS bc-widget-area
|
NVD | |||
|
CVE-2026-114624baserCMS is a website development framework
Executive summaryThe advisory is a code change to baserCMS, a website development framework, that hardens how two of its plugins (baser-core and bc-widget-area) handle serialized data. The text does not state a severity rating, and it does not say which versions are affected or what the vendor recommends beyond this code change. Technical summaryThe diff adds allowed_classes set to false to PHP unserialize calls in BcUtil::unserialize and adds a stripObjects helper in the WidgetArea entity, and its code comments describe the change as a PHP object injection countermeasure. The advisory does not explicitly describe the vulnerability, its attack vector, or its preconditions. Affected versions, fixed versions, a CVSS score, workarounds, and exploitation status are not stated. The advisory also gives no detection guidance, and the changed tests show objects being rejected or dropped rather than restored. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/baserproject/basercms/commit…a4c6b47ad7fb9e2c1529 Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsbaserprojectbaserCMSbaserproject basercmsbaserCMS baser-corebaserCMS bc-widget-area
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.5 | CVE-2026-114623 |
baserCMS is a website development framework
baserproject, baserCMSbaserproject basercms, baserCMS, baserCMS bc-theme-file
|
NVD | |||
|
CVE-2026-114623baserCMS is a website development framework
From the advisorybaserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, an authenticated user with only theme-file view permission can traverse outside the theme directory through the optional BcThemeFile plugin's Admin web screen. ThemeFilesController::parseArgs() constructs a path containing literal ../ segments, and the view and edit actions pass it to ThemeFilesService::get() without containment validation. Authorization checks the unresolved request path, after which ThemeFile::_getContents() reads the resolved file and exposes its contents in the form textarea. A client must preserve the dot segments rather than normalize them away. Readable files are limited to .php, .css, .js, and .ctp; this can disclose application source and config/install.php database credentials in MySQL or PostgreSQL deployments, while SQLite configurations have an empty database password. Reading config/app_local.php may expose the Security.salt fallback, which is effective only when not overridden by environment configuration. The flaw does not disclose .env, .pem, or SQLite .db files, does not itself permit file writes or code execution, and does not affect the separate API getFullpath() route. The plugin is disabled by default and unauthenticated requests are not sufficient. This issue has been patched in versions 5.3.2 and 5.4.2. Impact if exploitedConfidentialityHigh IntegrityNone AvailabilityNone
How it is exploited
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N AffectsbaserprojectbaserCMSbaserproject basercmsbaserCMSbaserCMS bc-theme-file
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.2 | CVE-2026-114622 |
baserCMS is a website development framework
baserproject, baserCMSbaserproject basercms, baserCMS bc-theme-file
|
NVD | |||
|
CVE-2026-114622baserCMS is a website development framework
Executive summaryThe advisory describes a path traversal flaw in baserCMS, a website development framework, that let requests reach files outside the theme directory, including reading and copying files on the server. The advisory text provided shows code changes that add path boundary checks, but it does not state a severity rating, and no CVSS score is stated. The advisory provides a patch as its remedy, and it does not state a workaround. Technical summaryThe flaw is a path traversal weakness (CWE class not stated) in the theme file management plugin bc-theme-file. Admin web routes built the fullpath from URL input without the boundary check used by the API route, so a path containing dot-dot segments could read images, copy source files into the current theme webroot, and write or rename files outside the theme. The attack requires an authenticated admin session, which the diff implies through the admin routes but the advisory does not explicitly state. The fix adds boundary checks in ThemeFilesController::parseArgs, BcThemeFileService, ThemeFilesService and ThemeFoldersService, and checks decoded paths as well. Affected and fixed version numbers are not stated, and no workaround or detection guidance is stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/baserproject/basercms/commit…c4b42d313983329aa162 Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsbaserprojectbaserCMSbaserproject basercmsbaserCMS bc-theme-file
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 8.8 | CVE-2026-114621 |
baserCMS is a website development framework
baserproject, baserCMSbaserproject basercms, baserCMS
|
NVD | |||
|
CVE-2026-114621baserCMS is a website development framework
Executive summaryThis advisory describes a SQL injection flaw in baserCMS, a website development framework. The text shows the fix adds filtering of database query parameters in the admin and admin API areas, but it does not state how severe the flaw is or give a CVSS score. The advisory does not state a fixed version number or any vendor recommendation beyond the code change. Technical summaryThe flaw is a SQL injection caused by request query parameters such as contain[...][conditions], contain[...][fields], finder and order being passed through to service getIndex() or get() methods, allowing SQL to be injected into WHERE, SELECT or ORDER BY clauses via EagerLoader. The fix removes ORM structure keys in a common controller base method called from beforeFilter, and adds order to the reserved key list in the query parameter trait; the Api prefix is excluded because those controllers reject contain with 403. Affected and fixed version numbers are not stated, and no CVSS score is given. No workaround or exploitation-in-the-wild information is stated, and no detection guidance is given beyond the added tests. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/baserproject/basercms/commit…1fa4647ba094caf8dcb6 Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||