CVE-2026-114622

baserCMS is a website development framework. In versions 5.2.3 before 5.3.2 and 5.4.0 before 5.4.2, the optional BcThemeFile plugin's Admin API validates a raw path in ThemeFilesService::update and getFullpath, but ThemeFileForm::execute subsequently applies rawurldecode to fullpath before writin...

CVE-2026-114623

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, an authenticated user with only theme-file view permission can traverse outside the theme directory through the optional BcThemeFile plugin's Admin web screen. ThemeFilesController::parseArgs...

CVE-2026-114623

The baserCMS website development framework (versions 5.0.0 to 5.3.1 and 5.4.0 to 5.4.1 ) contains a path traversal vulnerability in the optional BcThemeFile plugin's Admin web screen. The flaw exists because ThemeFilesController::parseArgs() constructs paths with literal ../ segments, which are t...

EUVD-2026-108994

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, an authenticated user with only theme-file view permission can traverse outside the theme directory through the optional BcThemeFile plugin's Admin web screen. ThemeFilesController::parseArgs...

CVE-2026-114623 baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosure

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, an authenticated user with only theme-file view permission can traverse outside the theme directory through the optional BcThemeFile plugin's Admin web screen. ThemeFilesController::parseArgs...

CVE-2026-114623 baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosure

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, an authenticated user with only theme-file view permission can traverse outside the theme directory through the optional BcThemeFile plugin's Admin web screen. ThemeFilesController::parseArgs...

CVE-2026-114623 baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosure

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, an authenticated user with only theme-file view permission can traverse outside the theme directory through the optional BcThemeFile plugin's Admin web screen. ThemeFilesController::parseArgs...

CVE-2026-114623

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, an authenticated user with only theme-file view permission can traverse outside the theme directory through the optional BcThemeFile plugin's Admin web screen. ThemeFilesController::parseArgs...

EUVD-2026-108993

baserCMS is a website development framework. In versions 5.2.3 before 5.3.2 and 5.4.0 before 5.4.2, the optional BcThemeFile plugin's Admin API validates a raw path in ThemeFilesService::update and getFullpath, but ThemeFileForm::execute subsequently applies rawurldecode to fullpath before writin...

CVE-2026-114622 baserCMS: Encoded path traversal bypass in the theme file API

baserCMS is a website development framework. In versions 5.2.3 before 5.3.2 and 5.4.0 before 5.4.2, the optional BcThemeFile plugin's Admin API validates a raw path in ThemeFilesService::update and getFullpath, but ThemeFileForm::execute subsequently applies rawurldecode to fullpath before writin...

CVE-2026-114622

The website development framework baserCMS contains an encoded path traversal bypass in the optional BcThemeFile plugin 's Admin API, affecting versions 5.2.3 before 5.3.2 and 5.4.0 before 5.4.2. The root cause is an incorrect behavior order where ThemeFilesService::update() and getFullpath() val...

CVE-2026-114622

baserCMS is a website development framework. In versions 5.2.3 before 5.3.2 and 5.4.0 before 5.4.2, the optional BcThemeFile plugin's Admin API validates a raw path in ThemeFilesService::update and getFullpath, but ThemeFileForm::execute subsequently applies rawurldecode to fullpath before writin...

CVE-2026-114622 baserCMS: Encoded path traversal bypass in the theme file API

baserCMS is a website development framework. In versions 5.2.3 before 5.3.2 and 5.4.0 before 5.4.2, the optional BcThemeFile plugin's Admin API validates a raw path in ThemeFilesService::update and getFullpath, but ThemeFileForm::execute subsequently applies rawurldecode to fullpath before writin...

PT-2026-122102

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, an authenticated user with only theme-file view permission can traverse outside the theme directory through the optional BcThemeFile plugin's Admin web screen. ThemeFilesController::parseArgs...

baserproject baserCMS processing logic error vulnerability

A security vulnerability exists in baseproject baserCMS versions prior to 5.2.3 and 5.4.0, as well as versions between 5.3.2 and 5.4.2. This vulnerability stems from the Admin API of the BcThemeFile plugin performing path validation before decoding; percent-encoded path traversal can bypass main...

PT-2026-122101

baserCMS is a website development framework. In versions 5.2.3 before 5.3.2 and 5.4.0 before 5.4.2, the optional BcThemeFile plugin's Admin API validates a raw path in ThemeFilesService::update and getFullpath, but ThemeFileForm:: execute subsequently applies rawurldecode to fullpath before...

BaserProject baserCMS information disclosure vulnerability

A security vulnerability exists in baseproject baserCMS versions prior to 5.3.2 and between 5.0.0 and 5.4.0 prior to 5.4.2. This vulnerability arises because authenticated users with read permissions on theme files can use the BcThemeFile plugin to construct paths containing ../ within the web...