Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-27697 EUVD-2026-17257GHSA-vh89-rjph-2g7p

baserCMS: SQL injection vulnerability in blog post

Published Mar 31, 2026 · Updated Mar 31, 2026 · Assigned by GitHub_M

Description

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a SQL injection vulnerability in blog posts. This issue has been patched in version 5.2.3.

Affected products

VendorProductAffectedFixed
baserproject basercms < 5.2.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist baserproject/basercms < 5.2.3 5.2.3 GHSA-vh89-rjph-2g7p

References