CVE-2026-30940

HIGH

baserCMS: Path Traversal in Theme File API Leads to Arbitrary File Write and RCE

Title source: cna
STIX 2.1

Description

baserCMS is a website development framework. Prior to version 5.2.3, a path traversal vulnerability exists in the theme file management API (/baser/api/admin/bc-theme-file/theme_files/add.json) that allows arbitrary file write. An authenticated administrator can include ../ sequences in the path parameter to create a PHP file in an arbitrary directory outside the theme directory, which may result in remote code execution (RCE). This issue has been patched in version 5.2.3.

References (3)

Scores

CVSS v3 7.2
EPSS 0.0035
EPSS Percentile 57.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-22 CWE-73
Status published
Products (3)
basercms/basercms < 5.2.3
baserproject/basercms 0 - 5.2.3Packagist
baserproject/basercms < 5.2.3
Published Mar 31, 2026
Tracked Since Mar 31, 2026