Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
baserCMS User Community records in CISA KEVNo baserCMS User Community vulnerabilities are listed in CISA KEV.
Priority LOW 36
A missing authentication for critical function vulnerability exists in baserCMS.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00315 · Published 2026-09-30 · Fixed in 5.4.1, 5.3.1 CWE-306
Priority LOW 22
A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00139 · Published 2026-09-30 · Fixed in 5.4.1, 5.3.1 CWE-79
Priority LOW 22
A cross-site scripting vulnerability via script validation bypass exists in baserCMS.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00151 · Published 2026-09-30 · Fixed in 5.4.1, 5.3.1 CWE-79
Priority LOW 22
A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00139 · Published 2026-09-30 · Fixed in 5.4.1, 5.3.1 CWE-79
Open these records in search →