VulertSecurity VulertSecurity

Vulnerability Database · Packagist · baserproject/basercms · Version

baserproject/basercms 4.0.6

4.0.6 is affected by 44 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 6 High 11 Medium 24 Low 3 Unrated 0

All baserproject/basercms versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

baserproject/basercms 4.0.6 vulnerabilities

44 vulnerabilities cover baserproject/basercms 4.0.6. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2023-25655: baserCMS allows any file to be uploaded 9.8 critical 4.7.5 23 Mar 2023
CVE-2023-25654: baserCMS File Uploader Remote Code Execution (RCE) vulnerability 9.8 critical 4.7.5 23 Mar 2023
CVE-2026-30880: baserCMS OS Command Injection Vulnerability in Installer 9.2 critical 5.2.3 31 Mar 2026
CVE-2026-30877: baserCMS OS Command Injection Vulnerability 9.1 critical 5.2.3 31 Mar 2026
CVE-2026-21861: baserCMS Remote Code Execution via OS Command Injection 9.1 critical 5.2.3 31 Mar 2026
CVE-2021-41243: OS Command Injection Vulnerability and Potential Zip Slip Vulnerability in baserCMS 9.1 critical 4.5.4 01 Dec 2021
CVE-2018-0569: OS Command Injection in baserCMS 8.8 high No fix published 14 May 2022
CVE-2017-10844: Code Injection in baserCMS 8.8 high No fix published 14 May 2022
CVE-2016-4879: CSRF vulnerability in baserCMS plugin Mail 8.8 high No fix published 13 May 2022
CVE-2025-32957: baserCMS Unsafe File Upload Leading to Remote Code Execution (RCE) 8.7 high 5.2.3 31 Mar 2026
CVE-2021-39136: Cross-site scripting vulnerability in file upload in baserCMS 8.7 high 4.5.1 30 Aug 2021
CVE-2018-0572: baserCMS Access Control Bypass 8.1 high 4.1.1 13 May 2022
CVE-2021-41279: Potential Zip Slip Vulnerability in baserCMS 7.7 high 4.5.4 01 Dec 2021
CVE-2020-15159: Cross Site Scripting and RCE in baserCMS 7.6 low 4.3.7 28 Aug 2020
CVE-2020-15155: Cross Site Scripting(XSS) Vulnerability in baserproject/basercms 7.3 low 4.3.7 28 Aug 2020
CVE-2020-15154: Cross Site Scripting in baserCMS 7.3 low 4.3.7 28 Aug 2020
CVE-2026-30940: baserCMS Arbitrary File Write and RCE via Theme File API 7.2 high 5.2.3 31 Mar 2026
CVE-2018-18942: RCE in baserCMS before 4.1.4 7.2 high 4.1.4 13 May 2022
CVE-2021-20682: OS Command Injection in baserCMS 7.2 high 4.4.5 08 Jun 2021
CVE-2026-32734: baserCMS Vulnerable to DOM-based Cross-site Scripting 7.1 high 5.2.3 31 Mar 2026
CVE-2024-46998: baserCMS XSS Vulnerability in Edit Email Form Settings 7.1 medium 5.1.2 24 Oct 2024
CVE-2026-30879: baserCMS Cross-Site Scripting Vulnerability in Blog Posts 6.9 medium 5.2.3 31 Mar 2026
CVE-2026-27697: baserCMS SQL Injection Vulnerability in Blog Post Functionality 6.9 medium 5.2.3 31 Mar 2026
CVE-2024-46996: baserCMS XSS Vulnerability in Blog Posts Feature 6.3 medium 5.1.2 24 Oct 2024
CVE-2024-46995: baserCMS Cross-site Scripting (XSS) Vulnerability in HTTP 400 Bad Request 6.1 medium 5.1.2 24 Oct 2024
CVE-2023-44379: baserCMS Cross-site Scripting vulnerability in Site search Feature 6.1 medium 5.0.9 22 Feb 2024
CVE-2023-43647: baserCMS Cross-site Scripting vulnerability in File upload Feature 6.1 medium 4.8.0 26 Oct 2023
CVE-2023-29009: baserCMS Cross-site Scripting Vulnerability in Favorites Feature 6.1 medium 4.8.0 26 Oct 2023
CVE-2018-0574: XSS in baserCMS 6.1 medium No fix published 14 May 2022
CVE-2023-51450: baserCMS OS Command Injection Vulnerability in Installer 5.6 medium 5.0.9 22 Feb 2024
CVE-2024-46994: baserCMS Cross-site Scripting (XSS) Vulnerability in Blog Posts and Contents List Feature 5.4 medium 5.1.2 24 Oct 2024
CVE-2024-26128: baserCMS Cross-site Scripting vulnerability in Content Management 5.4 medium 5.0.9 22 Feb 2024
CVE-2018-0570: XSS in baserCMS 5.4 medium No fix published 14 May 2022
CVE-2021-20683: Cross-site Scripting (XSS) in baserCMS 5.4 medium 4.4.5 08 Jun 2021
CVE-2021-20681: Cross-site Scripting (XSS) in baserCMS 5.4 medium 4.4.5 08 Jun 2021
CVE-2026-30878: baserCMS Mail Form Acceptance Bypass Vulnerability 5.3 medium 5.2.3 31 Mar 2026
CVE-2018-0575: Sensitive Data Exposure in baserCMS 5.3 medium No fix published 14 May 2022
CVE-2023-43648: baserCMS Directory Traversal Vulnerability in Form Submission Data Management Feature 4.9 medium 4.8.0 26 Oct 2023
CVE-2022-42486: baserCMS Stored Cross-site Scripting Vulnerability 4.8 medium 4.7.2 07 Dec 2022
CVE-2022-41994: baserCMS Stored Cross-site Scripting Vulnerability 4.8 medium 4.7.2 07 Dec 2022
CVE-2018-18943: XSS in baserCMS before 4.1.4 4.8 medium 4.1.4 14 May 2022
CVE-2023-43649: baserCMS CSRF vulnerability in Content preview Feature 4.7 medium 4.8.0 26 Oct 2023
CVE-2022-39325: baserproject/basercms Cross-Site Scripting (XSS) Vulnerability 4.6 medium 4.7.2 28 Nov 2022
CVE-2018-0571: baserCMS Arbitrary File Upload Vulnerability 4.3 medium 4.1.1 14 May 2022

Looking for another version, or everything Vulert holds for baserproject/basercms?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About baserproject/basercms 4.0.6

Is baserproject/basercms 4.0.6 vulnerable?

Yes. 44 vulnerabilities in the Vulert database cover baserproject/basercms 4.0.6: 6 critical, 11 high, 24 medium and 3 low. Each entry above names the fixed version to move to.

How do I monitor baserproject/basercms for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the baserproject/basercms version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.