baserCMS plugin for CakePHP
97%
Total Score
90
100
100
| Title | Versions | Severity |
|---|---|---|
CVE-2026-32734 baserproject/basercms is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 5.2.2. | 0.0.0 - 5.2.2 | High |
CVE-2026-30940 baserproject/basercms is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 5.2.2. | 0.0.0 - 5.2.2 | High |
CVE-2026-30880 baserproject/basercms is vulnerable to Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in versions 0.0.0 - 5.2.2. | 0.0.0 - 5.2.2 | Critical |
CVE-2026-30879 baserproject/basercms is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 5.2.2. | 0.0.0 - 5.2.2 | Medium |
CVE-2026-30878 baserproject/basercms is vulnerable to Improper Authorization in versions 0.0.0 - 5.2.2. | 0.0.0 - 5.2.2 | Medium |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
cakephp/cakephp Version 5.0.* | — | — |
robmorgan/phinx Version 0.16.10 | — | — |
firebase/php-jwt Version 7.0.2 | — | — |
psr/http-message Version ^1.0 | — | — |
cakephp/migrations Version ^4.0.0 | — | — |
Secure your code, cloud, and runtime environments in one central system. Find and fix vulnerabilities automatically.
No credit card required | Scan results in 32secs.
SOC 2Compliant
ISO 27001Compliant