baserproject/basercms · Security
baserCMS has an SQL injection vulnerability in its blog post functionality
- GHSA ID
- GHSA-vh89-rjph-2g7p
- CVE ID
- CVE-2026-27697
- Severity
- medium
- Published
- Updated
- CVSS v4
- 6.9 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Description
baserCMS has a SQL injection vulnerability in blog posts.
Target
baserCMS 5.2.2 and earlier versions
Vulnerability
Malicious SQL may be executed in blog posts.
Countermeasures
Update to the latest version of baserCMS
Please refer to the following page to reference for more information. https://basercms.net/security/JVN_52157568
Credits
Mirai Matsumoto@Future Secure Wave, Inc.
CWEs
- CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')