CVE-2026-97150

The BcAddonMigrator plugin in baserCMS (provided by baserCMS Users Community) is vulnerable to an Inclusion of Functionality from Untrusted Control Sphere (CWE-829). During the conversion of baserCMS4-style addons to baserCMS5-style ones, the BcAddonMigrator incorrectly includes the config.php fi...