File and Path Handling

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

1. Remote Code Execution in baserCMSCVE-2020-15277baserproject · CVSS 7.2 · 2.3% likely

   CWE-434

2. Zip Slip Vulnerability in BaserCMSCVE-2021-41279baserproject · CVSS 7.7 · 1.6% likely

   CWE-22

3. baserCMS File Uploader Remote Code Execution (RCE) vulnerabilityCVE-2023-25654baserproject · CVSS 9.8 · 1.5% likely

   CWE-434

4. baserCMS Directory Traversal vulnerability in Form submission data management FeatureCVE-2023-43648baserproject · CVSS 4.9 · 1.2% likely

   CWE-22

5. baserCMS allows any file to be uploadedCVE-2023-25655baserproject · CVSS 9.8 · 1.1% likely

   CWE-434

6. baserCMS: Path Traversal in Theme File API Leads to Arbitrary File Write and RCECVE-2026-30940baserproject · CVSS 7.2 · 1.1% likely

   CWE-22

7. baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosureCVE-2026-114623baserproject · CVSS 6.5 · 0.7% likely

   CWE-22

8. baserCMS: Encoded path traversal bypass in the theme file APICVE-2026-114622baserproject · CVSS 7.2 · 0.6% likely

   CWE-22

9. baserCMS: unsafe File Upload Leading to Remote Code Execution (RCE)CVE-2025-32957baserproject · CVSS 8.7 · 0.6% likely

   CWE-434

10. baserCMS: BcCustomContent file fields can be configured to allow executable file extensions such as php, leading to arbitrary PHP file uploadCVE-2026-115481baserproject · CVSS 8.5 · 0.4% likely

    CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.