CVE-2026-114623 | baserproject BaserCMS up to 5.3.1/5.4.1 BcThemeFile config/install.php parseArgs path traversal (EUVD-2026-108994)

October 23, 2026 Yanac

A vulnerability was found in baserproject BaserCMS up to 5.3.1/5.4.1. It has been classified as problematic. Affected is the function ThemeFilesController::parseArgs of the file config/install.php of the component BcThemeFile. This manipulation causes path traversal.

This vulnerability is handled as CVE-2026-114623. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More