agentprime: baserproject-basercmsEvery new CVE for baserproject-basercms.https://agentprime.io/CVE-2026-115457: baserCMS: Unauthenticated Stored XSS via Shortcode Expansion in Blog Commentshttps://agentprime.io/advisories/CVE-2026-115457/https://agentprime.io/advisories/CVE-2026-115457/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 14:00:33 GMTCVECVE-2026-114624: baserCMS: PHP object injection via unguarded unserialize() in the widget-area entityhttps://agentprime.io/advisories/CVE-2026-114624/https://agentprime.io/advisories/CVE-2026-114624/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:47:08 GMTCVECVE-2026-114623: baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosurehttps://agentprime.io/advisories/CVE-2026-114623/https://agentprime.io/advisories/CVE-2026-114623/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:45:29 GMTCVECVE-2026-114622: baserCMS: Encoded path traversal bypass in the theme file APIhttps://agentprime.io/advisories/CVE-2026-114622/https://agentprime.io/advisories/CVE-2026-114622/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:41:33 GMTCVECVE-2026-114621: baserCMS: SQL injection in the admin panel and admin APIhttps://agentprime.io/advisories/CVE-2026-114621/https://agentprime.io/advisories/CVE-2026-114621/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:39:42 GMTCVECVE-2026-115480: baserCMS: Public Web API mail-form submission bypasses image CAPTCHAhttps://agentprime.io/advisories/CVE-2026-115480/https://agentprime.io/advisories/CVE-2026-115480/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:37:32 GMTCVECVE-2026-115479: baserCMS: Mail-form auto-replies accept multiple visitor-controlled recipientshttps://agentprime.io/advisories/CVE-2026-115479/https://agentprime.io/advisories/CVE-2026-115479/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:36:01 GMTCVECVE-2026-115481: baserCMS: BcCustomContent file fields can be configured to allow executable file extensions such as php, leading to arbitrary PHP file uploadhttps://agentprime.io/advisories/CVE-2026-115481/https://agentprime.io/advisories/CVE-2026-115481/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:34:26 GMTCVECVE-2026-76635: baserCMS < 5.3.0 SQL Injection and Code Injection via BcDatabaseService.phphttps://agentprime.io/advisories/CVE-2026-76635/https://agentprime.io/advisories/CVE-2026-76635/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 13:58:05 GMTCVE