Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-30879 EUVD-2026-17263GHSA-jmq3-x8q7-j9qm

baserCMS: Cross-site scripting vulnerability in blog post

Published Mar 31, 2026 · Updated Mar 31, 2026 · Assigned by GitHub_M

Description

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a cross-site scripting vulnerability in blog posts. This issue has been patched in version 5.2.3.

Affected products

VendorProductAffectedFixed
baserproject basercms < 5.2.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist baserproject/basercms < 5.2.3 5.2.3 GHSA-jmq3-x8q7-j9qm

References