VulertSecurity VulertSecurity

Vulnerability Database · Packagist · baserproject/basercms · Version

baserproject/basercms 4.5.5

4.5.5 is affected by 31 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 5 High 6 Medium 20 Low 0 Unrated 0

All baserproject/basercms versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

baserproject/basercms 4.5.5 vulnerabilities

31 vulnerabilities cover baserproject/basercms 4.5.5. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2023-25655: baserCMS allows any file to be uploaded 9.8 critical 4.7.5 23 Mar 2023
CVE-2023-25654: baserCMS File Uploader Remote Code Execution (RCE) vulnerability 9.8 critical 4.7.5 23 Mar 2023
CVE-2026-30880: baserCMS OS Command Injection Vulnerability in Installer 9.2 critical 5.2.3 31 Mar 2026
CVE-2026-30877: baserCMS OS Command Injection Vulnerability 9.1 critical 5.2.3 31 Mar 2026
CVE-2026-21861: baserCMS Remote Code Execution via OS Command Injection 9.1 critical 5.2.3 31 Mar 2026
CVE-2018-0569: OS Command Injection in baserCMS 8.8 high No fix published 14 May 2022
CVE-2017-10844: Code Injection in baserCMS 8.8 high No fix published 14 May 2022
CVE-2016-4879: CSRF vulnerability in baserCMS plugin Mail 8.8 high No fix published 13 May 2022
CVE-2025-32957: baserCMS Unsafe File Upload Leading to Remote Code Execution (RCE) 8.7 high 5.2.3 31 Mar 2026
CVE-2026-30940: baserCMS Arbitrary File Write and RCE via Theme File API 7.2 high 5.2.3 31 Mar 2026
CVE-2026-32734: baserCMS Vulnerable to DOM-based Cross-site Scripting 7.1 high 5.2.3 31 Mar 2026
CVE-2024-46998: baserCMS XSS Vulnerability in Edit Email Form Settings 7.1 medium 5.1.2 24 Oct 2024
CVE-2026-30879: baserCMS Cross-Site Scripting Vulnerability in Blog Posts 6.9 medium 5.2.3 31 Mar 2026
CVE-2026-27697: baserCMS SQL Injection Vulnerability in Blog Post Functionality 6.9 medium 5.2.3 31 Mar 2026
CVE-2024-46996: baserCMS XSS Vulnerability in Blog Posts Feature 6.3 medium 5.1.2 24 Oct 2024
CVE-2024-46995: baserCMS Cross-site Scripting (XSS) Vulnerability in HTTP 400 Bad Request 6.1 medium 5.1.2 24 Oct 2024
CVE-2023-44379: baserCMS Cross-site Scripting vulnerability in Site search Feature 6.1 medium 5.0.9 22 Feb 2024
CVE-2023-43647: baserCMS Cross-site Scripting vulnerability in File upload Feature 6.1 medium 4.8.0 26 Oct 2023
CVE-2023-29009: baserCMS Cross-site Scripting Vulnerability in Favorites Feature 6.1 medium 4.8.0 26 Oct 2023
CVE-2018-0574: XSS in baserCMS 6.1 medium No fix published 14 May 2022
CVE-2023-51450: baserCMS OS Command Injection Vulnerability in Installer 5.6 medium 5.0.9 22 Feb 2024
CVE-2024-46994: baserCMS Cross-site Scripting (XSS) Vulnerability in Blog Posts and Contents List Feature 5.4 medium 5.1.2 24 Oct 2024
CVE-2024-26128: baserCMS Cross-site Scripting vulnerability in Content Management 5.4 medium 5.0.9 22 Feb 2024
CVE-2018-0570: XSS in baserCMS 5.4 medium No fix published 14 May 2022
CVE-2026-30878: baserCMS Mail Form Acceptance Bypass Vulnerability 5.3 medium 5.2.3 31 Mar 2026
CVE-2018-0575: Sensitive Data Exposure in baserCMS 5.3 medium No fix published 14 May 2022
CVE-2023-43648: baserCMS Directory Traversal Vulnerability in Form Submission Data Management Feature 4.9 medium 4.8.0 26 Oct 2023
CVE-2022-41994: baserCMS Stored Cross-site Scripting Vulnerability 4.8 medium 4.7.2 07 Dec 2022
CVE-2022-42486: baserCMS Stored Cross-site Scripting Vulnerability 4.8 medium 4.7.2 07 Dec 2022
CVE-2023-43649: baserCMS CSRF vulnerability in Content preview Feature 4.7 medium 4.8.0 26 Oct 2023
CVE-2022-39325: baserproject/basercms Cross-Site Scripting (XSS) Vulnerability 4.6 medium 4.7.2 28 Nov 2022

Looking for another version, or everything Vulert holds for baserproject/basercms?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About baserproject/basercms 4.5.5

Is baserproject/basercms 4.5.5 vulnerable?

Yes. 31 vulnerabilities in the Vulert database cover baserproject/basercms 4.5.5: 5 critical, 6 high, 20 medium and 0 low. Each entry above names the fixed version to move to.

How do I monitor baserproject/basercms for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the baserproject/basercms version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.