Threats affecting pkg:composer/basercms/basercms

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-93462baserCMS · Missing Authentication Medium5.3EPSS 0.3%2026-09-30CVE Database V5CVE-2026-93462 CVE-2026-93462 is a vulnerability in baserCMS where a critical function lacks proper authentication. This flaw allows a remote attacker to potentially access sensitive information without authorization. The vulnerability affects baserCMS versions prior to 5.3.1 and 5.4.1. The CVSS score is 5.3, indicating a medium severity level. EPSS 0.3%Vulnerability baserCMS User Community	CVE Database V5	2026-09-30
Medium	5.4	EPSS 0.1%	CVE-2026-93464baserCMS · Cross-site Scripting (XSS) Medium5.4EPSS 0.1%2026-09-30CVE Database V5CVE-2026-93464 CVE-2026-93464 is a stored cross-site scripting (XSS) vulnerability in baserCMS that occurs via custom content descriptions. Exploitation of this vulnerability could allow execution of arbitrary scripts in the user's browser. The vulnerability affects baserCMS versions prior to 5.4.1 and 5.3.1. It has a medium severity rating with a CVSS score of 5.4. EPSS 0.1%Vulnerability baserCMS User Community	CVE Database V5	2026-09-30

Page 1 of 1