Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-93460 EUVD-2026-89662

A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS. If this vulnerability is exploite…

Published Sep 30, 2026 · Updated Oct 1, 2026 · Assigned by jpcert

Description

A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.

Affected products

VendorProductAffectedFixed
baserCMS User Community baserCMS < 5.4.1, < 5.3.1 5.4.1

References