baserCMS User Community has 4 CVEs on record. 4 were published in the last 90 days. The busiest recent month was September 2026 with 4. The median CVSS is 5.4 (medium). The most common weakness class is CWE-79 (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.4
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Worst active — by depth score
CVE-2026-93464Medium· 5.4Stored Cross-Site Scripting via custom content descriptions vulnerability exists in baserCMS 30CVE-2026-93463Medium· 5.4Cross-Site Scripting via Script Validation Bypass exists in baserCMS30CVE-2026-93460Medium· 5.4Stored Cross-site scripting via appended strings in email form fields vulnerability exists in baserCMS 30CVE-2026-93462Medium· 5.3Missing authentication for critical function vulnerability exists in baserCMS 29
baserCMS User Community vulnerabilities
CVEs affecting baserCMS User Community, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-93463Medium· 5.4Cross-Site Scripting via Script Validation Bypass exists in baserCMS
Cross-Site Scripting via Script Validation Bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser may be caused.
CVE-2026-93464Medium· 5.4Stored Cross-Site Scripting via custom content descriptions vulnerability exists in baserCMS
Stored Cross-Site Scripting via custom content descriptions vulnerability exists in baserCMS . If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser may be caused.
CVE-2026-93460Medium· 5.4Stored Cross-site scripting via appended strings in email form fields vulnerability exists in baserCMS
Stored Cross-site scripting via appended strings in email form fields vulnerability exists in baserCMS . If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser may be caused.
CVE-2026-93462Medium· 5.3Missing authentication for critical function vulnerability exists in baserCMS
Missing authentication for critical function vulnerability exists in baserCMS . If a remote unauthenticated attacker there is a possibility that sensitive information could be obtained.