baserproject baserCMS processing logic error vulnerability

A security vulnerability exists in baseproject baserCMS versions prior to 5.2.3 and 5.4.0, as well as versions between 5.3.2 and 5.4.2. This vulnerability stems from the Admin API of the BcThemeFile plugin performing path validation before decoding; percent-encoded path traversal can bypass main...