Skip to content
OpenAdvisories
Critical · 9.2 CVE-2026-30880 EUVD-2026-17265GHSA-6hpg-8rx3-cwgv

baserCMS: OS command injection vulnerability in installer

Published Mar 31, 2026 · Updated Mar 31, 2026 · Assigned by GitHub_M

Description

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has an OS command injection vulnerability in the installer. This issue has been patched in version 5.2.3.

Affected products

VendorProductAffectedFixed
baserproject basercms < 5.2.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist baserproject/basercms < 5.2.3 5.2.3 GHSA-6hpg-8rx3-cwgv

References