Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 56
Reset filtersbaserCMS Path Traversal Leads to Arbitrary File Write and RCE via Theme File API
baserCMS has OS command injection vulnerability in installer
baserCMS has a cross-site scripting vulnerability in blog posts
baserCMS has Mail Form Acceptance Bypass via Public API
baserCMS Update Functionality Vulnerable to OS Command Injection
baserCMS has an SQL injection vulnerability in its blog post functionality
baserCMS has OS Command Injection Leading to Remote Code Execution (RCE)
baserCMS has Unsafe File Upload Leading to Remote Code Execution (RCE)
baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature
baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature
baserCMS has a Cross-site Scripting (XSS) Vulnerability in HTTP 400 Bad Request
baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts and Contents list Feature
baserCMS Cross-site Scripting vulnerability in Site search Feature
baserCMS OS command injection vulnerability in Installer
baserCMS Cross-site Scripting vulnerability in Content Management
baserCMS Code Injection Vulnerability in Mail Form Feature
baserCMS CSRF vulnerability in Content preview Feature
baserCMS Directory Traversal vulnerability in Form submission data management Feature
baserCMS Cross-site Scripting vulnerability in File upload Feature
baserCMS Cross-site Scripting Vulnerability in Favorites Feature
baserCMS allows any file to be uploaded
baserCMS File Uploader Remote Code Execution (RCE) vulnerability
baserCMS vulnerable to stored Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.