CVE-2026-93460

MEDIUMCVSS 5.4

Description

A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.

Timeline

Published:September 30th, 2026 8:16 AM

Last modified:October 1st, 2026 5:17 AM

CVSS Scoring

CVSS v3: 5.4 (MEDIUM)

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

CWE-79

References & Reports

Advisories, patches, and third-party reports

https://basercms.net/security/JVN_14353754
https://jvn.jp/en/jp/JVN14353754

Source: NIST NVD · Data may lag official sources by up to one minute