Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: baserCMS User Community Clear all filters
TI-2026-62986 CVE-2026-93462

Missing authentication in baserCMS

Priority LOW 36

A missing authentication for critical function vulnerability exists in baserCMS.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00315 Published 2026-09-30 Fixed in 5.4.1, 5.3.1 CWE-306
TI-2026-62988 CVE-2026-93464

Cross-site scripting in baserCMS

Priority LOW 22

A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00139 Published 2026-09-30 Fixed in 5.4.1, 5.3.1 CWE-79
TI-2026-62985 CVE-2026-93460

Cross-site scripting in baserCMS

Priority LOW 22

A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00139 Published 2026-09-30 Fixed in 5.4.1, 5.3.1 CWE-79
TI-2026-62987 CVE-2026-93463

Cross-site scripting in baserCMS

Priority LOW 22

A cross-site scripting vulnerability via script validation bypass exists in baserCMS.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00151 Published 2026-09-30 Fixed in 5.4.1, 5.3.1 CWE-79