baserproject/basercms · Security
baserCMS has a cross-site scripting vulnerability in blog posts
- GHSA ID
- GHSA-jmq3-x8q7-j9qm
- CVE ID
- CVE-2026-30879
- Severity
- medium
- Published
- Updated
- CVSS v4
- 6.9 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Description
baserCMS has a cross-site scripting vulnerability in blog posts.
Target
baserCMS 5.2.1 and earlier versions
Vulnerability
Malicious Javascript may be executed in blog posts.
Countermeasures
Update to the latest version of baserCMS
Please refer to the following page to reference for more information. https://basercms.net/security/JVN_20837860
Credits
Gai Tanaka@Mitsui Bussan Secure Directions, Inc.
CWEs
- CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')