CVE-2018-0574: Basercms

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Basercms Basercms: from 3.0.0, up to and including 3.0.15; after 4.0.0, up to and including 4.1.0.1

Published 2018-06-26. Last modified 2026-06-17.