Read the docs

baserCMS User Community

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

baserCMS User Community records in CISA KEV

No baserCMS User Community vulnerabilities are listed in CISA KEV.

Records

4 records

Priority LOW 36

A missing authentication for critical function vulnerability exists in baserCMS.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00315 Published 2026-09-30 Fixed in 5.4.1, 5.3.1 CWE-306
Priority LOW 22

A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00139 Published 2026-09-30 Fixed in 5.4.1, 5.3.1 CWE-79
Priority LOW 22

A cross-site scripting vulnerability via script validation bypass exists in baserCMS.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00151 Published 2026-09-30 Fixed in 5.4.1, 5.3.1 CWE-79
Priority LOW 22

A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00139 Published 2026-09-30 Fixed in 5.4.1, 5.3.1 CWE-79
Open these records in search →