baserCMS
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 80 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 2, 2011 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →baserCMS: PHP object injection via unguarded unserialize() in the widget-area entity
baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosure
baserCMS: Encoded path traversal bypass in the theme file API
baserCMS: SQL injection in the admin panel and admin API
baserCMS: Public Web API mail-form submission bypasses image CAPTCHA
baserCMS: Mail-form auto-replies accept multiple visitor-controlled recipients
baserCMS: BcCustomContent file fields can be configured to allow executable file extensions such as php, leading to arbitrary PHP file upload
Monitor baserCMS in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.