https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T23:23:31.295700+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-97150 CVE-2026-97150 2026-09-30T23:23:31.297204+00:00

Affected: baserCMS Users Community BcAddonMigrator

When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config.php" from the addon, which means the PHP code in the file is executed. Arbitrary files on the system may be read or deleted by an administrative user.