📦

basercms

Vendor: basercms

Actively Exploited 0 CISA KEV List
PoC / Exploits 1 Code Available
Total RCEs 16 Remote Access
Total CVEs 334 Total Indexed
Avg. EPSS 1.10% Exploit Prob.
Latest CVE CVE-2026-32734 Mar 31

Security Vulnerability Index

Page 6 / 34
8.8 CVSS

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Uploader version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

EPSS: 0.92%
8.8 CVSS

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

EPSS: 0.92%
8.8 CVSS

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

EPSS: 0.92%
8.8 CVSS

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

EPSS: 0.92%
5.4 CVSS

Cross-site scripting vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

EPSS: 0.90%
8.8 CVSS

Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

EPSS: 0.92%
8.8 CVSS

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

EPSS: 0.94%
5.4 CVSS

Cross-site scripting vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

EPSS: 0.92%
8.8 CVSS

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

EPSS: 0.88%
8.8 CVSS

Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

EPSS: 0.94%