CVE-2026-30879

Description

baserCMS has a cross-site scripting vulnerability in blog posts. ### Target baserCMS 5.2.1 and earlier versions ### Vulnerability Malicious Javascript may be executed in blog posts. ### Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference for more information. https://basercms.net/security/JVN_20837860 ### Credits Gai Tanaka@Mitsui Bussan Secure Directions, Inc.

Affected packages (1)

• Packagist/baserproject/basercmsfrom 0, < 5.2.3

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2026-30879
• PATCHhttps://github.com/baserproject/basercms
• WEBhttps://basercms.net/security/JVN_20837860
• WEBhttps://github.com/baserproject/basercms/releases/tag/5.2.3
• WEBhttps://github.com/baserproject/basercms/security/advisories/GHSA-jmq3-x8q7-j9qm