baserCMS User Community has 4 CVEs on record. 4 were published in the last 90 days. The busiest recent month was September 2026 with 4. The median CVSS is 5.4 (medium). The most common weakness class is CWE-79 (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.4
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Worst active — by depth score
CVE-2026-93464Medium· 5.4A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS30CVE-2026-93463Medium· 5.4A cross-site scripting vulnerability via script validation bypass exists in baserCMS30CVE-2026-93460Medium· 5.4A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS30CVE-2026-93462Medium· 5.3A missing authentication for critical function vulnerability exists in baserCMS29
baserCMS User Community vulnerabilities
CVEs affecting baserCMS User Community, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-93463Medium· 5.4A cross-site scripting vulnerability via script validation bypass exists in baserCMS
A cross-site scripting vulnerability via script validation bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.
CVE-2026-93464Medium· 5.4A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS
A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.
CVE-2026-93460Medium· 5.4A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS
A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.
CVE-2026-93462Medium· 5.3A missing authentication for critical function vulnerability exists in baserCMS
A missing authentication for critical function vulnerability exists in baserCMS. If this vulnerability is exploited, a remote attacker may obtain sensitive information.