Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-93463 EUVD-2026-89661

A cross-site scripting vulnerability via script validation bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary scri…

Published Sep 30, 2026 · Updated Oct 2, 2026 · Assigned by jpcert

Description

A cross-site scripting vulnerability via script validation bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.

Affected products

VendorProductAffectedFixed
baserCMS User Community baserCMS < 5.4.1, < 5.3.1 5.4.1

References