[HIGH] baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature

PKSA-vwf1-pc89-hwmm CVE-2024-46998 GHSA-p3m2-mj3j-j49x

Affected version: <=5.1.1

Reported by:
GitHub

[MEDIUM] baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature

PKSA-2n26-3nmt-wj9x CVE-2024-46996 GHSA-66jv-qrm3-vvfg

Affected version: <=5.1.1

Reported by:
GitHub

[MEDIUM] baserCMS has a Cross-site Scripting (XSS) Vulnerability in HTTP 400 Bad Request

PKSA-p655-dyj9-4mvs CVE-2024-46995 GHSA-mr7q-fv7j-jcgv

Affected version: <=5.1.1

Reported by:
GitHub

[MEDIUM] baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts and Contents list Feature

PKSA-xcdb-2rf5-69bx CVE-2024-46994 GHSA-wrjc-fmfq-w3jr

Affected version: <=5.1.1

Reported by:
GitHub

[MEDIUM] baserCMS Cross-site Scripting vulnerability in Site search Feature

PKSA-mwdp-p7zx-ctg9 CVE-2023-44379 GHSA-66c2-p8rh-qx87

Affected version: <5.0.9

Reported by:
GitHub

[MEDIUM] baserCMS OS command injection vulnerability in Installer

PKSA-8rh3-g94s-b7nm CVE-2023-51450 GHSA-77fc-4cv5-hmfr

Affected version: <5.0.9

Reported by:
GitHub

[MEDIUM] baserCMS Cross-site Scripting vulnerability in Content Management

PKSA-6q5n-gkcc-h3dr CVE-2024-26128 GHSA-jjxq-m8h3-4vw5

Affected version: <5.0.9

Reported by:
GitHub

[MEDIUM] baserCMS CSRF vulnerability in Content preview Feature

PKSA-nxwy-9p2v-qc9n CVE-2023-43649 GHSA-fw9x-cqjq-7jx5

Affected version: <4.8.0

Reported by:
GitHub

[MEDIUM] baserCMS Directory Traversal vulnerability in Form submission data management Feature

PKSA-22d5-943w-6dy7 CVE-2023-43648 GHSA-hmqj-gv2m-hq55

Affected version: <4.8.0

Reported by:
GitHub

[MEDIUM] baserCMS Cross-site Scripting vulnerability in File upload Feature

PKSA-bxhm-kd8v-fz1m CVE-2023-43647 GHSA-ggj4-78rm-6xgv

Affected version: <4.8.0

Reported by:
GitHub

[MEDIUM] baserCMS Cross-site Scripting Vulnerability in Favorites Feature

PKSA-fcwx-h4gs-44bz CVE-2023-29009 GHSA-8vqx-prq4-rqrq

Affected version: <4.8.0

Reported by:
GitHub