This vulnerability in baserCMS allows an attacker to inject stored malicious scripts via appended strings in email form fields. When exploited, the injected script executes in the context of the victim's browser, potentially leading to information disclosure or session hijacking. The affected versions are those prior to 5.4.1 and 5.3.1. The CVSS 3.0 vector indicates network attack vector, low attack complexity, requiring privileges and user interaction, with impact on confidentiality and integrity but not availability.

Successful exploitation can result in arbitrary script execution in the user's browser, potentially compromising user data confidentiality and integrity. There is no indication of availability impact or known active exploitation in the wild.

No explicit patch or remediation information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution with email form inputs and consider implementing input validation or sanitization as a temporary measure.