CVE-2020-15159

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) and Remote Code Execution (RCE). This may be executed by logging in as a system administrator and uploading an executable script file such as a PHP file.The affected components are ThemeFilesController.php and UploaderFilesController.php. This is fixed in version 4.3.7.

• CWE-79

• https://basercms.net/security/20200827Vendor Advisory
• https://github.com/baserproject/basercms/commit/16a7b3cd09a0ca355474119c76897eac2034a66dPatch, Third Party Advisory
• https://github.com/baserproject/basercms/security/advisories/GHSA-673x-f5wx-fxpwPatch, Third Party Advisory
• https://basercms.net/security/20200827Vendor Advisory
• https://github.com/baserproject/basercms/commit/16a7b3cd09a0ca355474119c76897eac2034a66dPatch, Third Party Advisory
• https://github.com/baserproject/basercms/security/advisories/GHSA-673x-f5wx-fxpwPatch, Third Party Advisory

Published

Aug 28, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15153Ampache before version 4.2.2 allows unauthenticated users to…9.8
• CVE-2020-15154baserCMS 4.3.6 and earlier is affected by Cross Site Scripti…7.3
• CVE-2020-15155baserCMS 4.3.6 and earlier is affected by Cross Site Scripti…7.3
• CVE-2020-15156In nodebb-plugin-blog-comments before version 0.7.0, a logge…8.1
• CVE-2020-15157In containerd (an industry-standard container runtime) befor…6.1
• CVE-2020-15158In libIEC61850 before version 1.4.3, when a message with COT…9.8
• CVE-2020-1516An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-15160PrestaShop from version 1.7.5.0 and before version 1.7.6.8 i…9.8
• CVE-2020-15161In PrestaShop from version 1.6.0.4 and before version 1.7.6.…6.1
• CVE-2020-15162In PrestaShop from version 1.5.0.0 and before version 1.7.6.…5.4
• CVE-2020-15163Python TUF (The Update Framework) reference implementation b…8.2
• CVE-2020-15164in Scratch Login (MediaWiki extension) before version 1.1, a…10