Repository navigation
Security: baserproject/basercms
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Authorization bypass of all `Api/Admin` endpoints configured with `auth => true` via session authentication fallback abuseGHSA-wgvx-x5g3-9v29 published
Jul 30, 2026 by ryuringModerate -
SQL Injection via ORDER BY in BlogTagsServiceGHSA-h68w-vjc3-82wv published
Jul 30, 2026 by ryuringCritical -
SQL Injection via ORDER BY in MailMessagesServiceGHSA-pqpg-933x-f4c5 published
Jul 30, 2026 by ryuringHigh -
OS Command Injection in the baserCMS Update FunctionalityGHSA-m9g7-rgfc-jcm7 published
Mar 30, 2026 by ryuringCritical -
Mail Form Acceptance Bypass via Public APIGHSA-8cr7-r8qw-gp3c published
Mar 30, 2026 by ryuringModerate -
Path Traversal in Theme File API Leads to Arbitrary File Write and RCEGHSA-c5c6-37vq-pjcq published
Mar 30, 2026 by ryuringHigh -
【JVN#20837860】Cross-site scripting vulnerability in blog postGHSA-jmq3-x8q7-j9qm published
Mar 30, 2026 by ryuringModerate -
【JVN#52157568】SQL injection vulnerability in blog postGHSA-vh89-rjph-2g7p published
Mar 30, 2026 by ryuringModerate -
【JVN#54513170】OS command injection vulnerability in installerGHSA-6hpg-8rx3-cwgv published
Mar 30, 2026 by ryuringCritical -
【JVNVU#94952030】XSS vulnerability in baserCMSGHSA-677c-xv24-crgx published
Mar 30, 2026 by ryuringHigh