VulertSecurity VulertSecurity

Vulnerability Database · Packagist · baserproject/basercms · Version

baserproject/basercms 5.0.1

5.0.1 is affected by 23 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 3 High 6 Medium 14 Low 0 Unrated 0

All baserproject/basercms versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

baserproject/basercms 5.0.1 vulnerabilities

23 vulnerabilities cover baserproject/basercms 5.0.1. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2026-30880: baserCMS OS Command Injection Vulnerability in Installer 9.2 critical 5.2.3 31 Mar 2026
CVE-2026-30877: baserCMS OS Command Injection Vulnerability 9.1 critical 5.2.3 31 Mar 2026
CVE-2026-21861: baserCMS Remote Code Execution via OS Command Injection 9.1 critical 5.2.3 31 Mar 2026
CVE-2018-0569: OS Command Injection in baserCMS 8.8 high No fix published 14 May 2022
CVE-2017-10844: Code Injection in baserCMS 8.8 high No fix published 14 May 2022
CVE-2016-4879: CSRF vulnerability in baserCMS plugin Mail 8.8 high No fix published 13 May 2022
CVE-2025-32957: baserCMS Unsafe File Upload Leading to Remote Code Execution (RCE) 8.7 high 5.2.3 31 Mar 2026
CVE-2026-30940: baserCMS Arbitrary File Write and RCE via Theme File API 7.2 high 5.2.3 31 Mar 2026
CVE-2026-32734: baserCMS Vulnerable to DOM-based Cross-site Scripting 7.1 high 5.2.3 31 Mar 2026
CVE-2024-46998: baserCMS XSS Vulnerability in Edit Email Form Settings 7.1 medium 5.1.2 24 Oct 2024
CVE-2026-30879: baserCMS Cross-Site Scripting Vulnerability in Blog Posts 6.9 medium 5.2.3 31 Mar 2026
CVE-2026-27697: baserCMS SQL Injection Vulnerability in Blog Post Functionality 6.9 medium 5.2.3 31 Mar 2026
CVE-2024-46996: baserCMS XSS Vulnerability in Blog Posts Feature 6.3 medium 5.1.2 24 Oct 2024
CVE-2024-46995: baserCMS Cross-site Scripting (XSS) Vulnerability in HTTP 400 Bad Request 6.1 medium 5.1.2 24 Oct 2024
CVE-2023-44379: baserCMS Cross-site Scripting vulnerability in Site search Feature 6.1 medium 5.0.9 22 Feb 2024
CVE-2018-0574: XSS in baserCMS 6.1 medium No fix published 14 May 2022
CVE-2023-51450: baserCMS OS Command Injection Vulnerability in Installer 5.6 medium 5.0.9 22 Feb 2024
CVE-2024-46994: baserCMS Cross-site Scripting (XSS) Vulnerability in Blog Posts and Contents List Feature 5.4 medium 5.1.2 24 Oct 2024
CVE-2024-26128: baserCMS Cross-site Scripting vulnerability in Content Management 5.4 medium 5.0.9 22 Feb 2024
CVE-2018-0570: XSS in baserCMS 5.4 medium No fix published 14 May 2022
CVE-2026-30878: baserCMS Mail Form Acceptance Bypass Vulnerability 5.3 medium 5.2.3 31 Mar 2026
CVE-2023-43792: baserCMS Code Injection Vulnerability in Mail Form Feature 5.3 medium No fix published 26 Oct 2023
CVE-2018-0575: Sensitive Data Exposure in baserCMS 5.3 medium No fix published 14 May 2022

Looking for another version, or everything Vulert holds for baserproject/basercms?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About baserproject/basercms 5.0.1

Is baserproject/basercms 5.0.1 vulnerable?

Yes. 23 vulnerabilities in the Vulert database cover baserproject/basercms 5.0.1: 3 critical, 6 high, 14 medium and 0 low. Each entry above names the fixed version to move to.

How do I monitor baserproject/basercms for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the baserproject/basercms version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.