baserCMS User Community vulnerabilities

Products

• baserCMS 4

Latest baserCMS User Community CVEs

Newest publication first

1. CVE-2026-93462 A missing authentication for critical function vulnerability exists in baserCMS. If this vulnerability is exploited, a remote attacker may obtain sensitive information.

   Published 2026-09-30

   Medium·CVSS 6.9 EPSS 0.32%

   A missing authentication for critical function vulnerability exists in baserCMS. If this vulnerability is exploited, a remote attacker may obtain sensitive information.

2. CVE-2026-93464 A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.

   Published 2026-09-30

   Medium·CVSS 5.1 EPSS 0.14%

   A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.

3. CVE-2026-93460 A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web brow...

   Published 2026-09-30

   Medium·CVSS 5.1 EPSS 0.14%

   A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.

4. CVE-2026-93463 A cross-site scripting vulnerability via script validation bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.

   Published 2026-09-30

   Medium·CVSS 5.1 EPSS 0.15%

   A cross-site scripting vulnerability via script validation bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.