This vulnerability in baserCMS arises from insufficient validation of scripts, enabling an attacker to inject and execute arbitrary scripts in the context of the victim's browser. The flaw is classified as a cross-site scripting (XSS) vulnerability caused by a script validation bypass. The affected versions include all baserCMS releases before 5.4.1 and 5.3.1. The CVSS 3.0 vector indicates network attack vector, low attack complexity, requires privileges and user interaction, with a scope change and partial impact on confidentiality and integrity.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of a user's browser, potentially leading to information disclosure or manipulation of user data within the affected application. The vulnerability does not impact availability. No known exploits are reported in the wild.

No explicit patch or remediation details are provided in the available data. Users should upgrade baserCMS to versions 5.4.1 or later, or 5.3.1 or later, as these versions are indicated as fixed. Until then, exercise caution with user input and consider implementing additional input validation or content security policies to mitigate risk. Patch status is not yet confirmed by vendor advisory; check official baserCMS sources for current remediation guidance.