Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-93464 EUVD-2026-89663

A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS. If this vulnerability is exploited, an arbi…

Published Sep 30, 2026 · Updated Oct 1, 2026 · Assigned by jpcert

Description

A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.

Affected products

VendorProductAffectedFixed
baserCMS User Community baserCMS < 5.4.1, < 5.3.1 5.4.1

References