https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T07:31:32.805727+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-60476 cnvd-2020-60476 2026-10-23T07:31:32.913493+00:00 cnvd-2020-60476 https://cve.radiocsirt.org/vuln/euvd-2026-42801 EUVD-2026-42801 2026-10-23T07:31:32.913536+00:00 EUVD-2026-42801 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15277 fkie_cve-2020-15277 2026-10-23T07:31:32.913552+00:00

baserCMS before version 4.4.1 is affected by Remote Code Execution (RCE). Code may be executed by logging in as a system administrator and uploading an executable script file such as a PHP file. The Edit template component is vulnerable. The issue is fixed in version 4.4.1.

 https://cve.radiocsirt.org/vuln/ghsa-6fmv-q269-55cw GHSA-6fmv-q269-55cw — Edit template, Remote Code Execution (RCE) Vulnerability in Latest Release 4.4.0 2026-10-23T07:31:32.913585+00:00

Affected: Packagist: baserproject/basercms

baserCMS 4.4.0 and earlier is affected by Remote Code Execution (RCE).

Impact: XSS via Arbitrary script execution. Attack vector is: Administrator must be logged in. Components are: Edit template. Tested baserCMS Version : 4.4.0 (Latest) Affected baserCMS Version : 4.0.0 ~ 4.4.0 Patches : https://basercms.net/security/20201029 Found by Aquilao Null

 https://cve.radiocsirt.org/vuln/gsd-2020-15277 gsd-2020-15277 2026-10-23T07:31:32.913612+00:00 gsd-2020-15277