baserCMS User Community vulnerabilities and threats

CVE-2026-93462 is a vulnerability in baserCMS where a critical function lacks proper authentication. This flaw allows a remote attacker to potentially access sensitive information without authorization. The vulnerability affects baserCMS versions prior to 5.3.1 and 5.4.1. The CVSS score is 5.3, indicating a medium severity level.

CVE-2026-93464 is a stored cross-site scripting (XSS) vulnerability in baserCMS that occurs via custom content descriptions. Exploitation of this vulnerability could allow execution of arbitrary scripts in the user's browser. The vulnerability affects baserCMS versions prior to 5.4.1 and 5.3.1. It has a medium severity rating with a CVSS score of 5.4.

CVE-2026-93460 is a stored cross-site scripting (XSS) vulnerability in baserCMS affecting versions prior to 5.4.1 and 5.3.1. The flaw exists in email form fields where appended strings can lead to arbitrary script execution in users' browsers. This vulnerability has a medium severity rating and a CVSS score of 5.4. No known exploits are reported in the wild. No patch or remediation details are provided in the available data.

CVE-2026-93463 is a cross-site scripting (XSS) vulnerability in baserCMS that allows arbitrary script execution in a user's browser due to a script validation bypass. The vulnerability affects baserCMS versions prior to 5.4.1 and 5.3.1. It has a medium severity rating with a CVSS score of 5.4. No known exploits are reported in the wild, and no official patch information is provided.