CVE-2026-93460 — baserCMS User Community / baserCMS

CVE-2026-93460

baserCMS User Community / baserCMS PUBLISHED

Description (CNA)

A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.

Affected (CNA)

Vendor / product	Versions
baserCMS User Community / baserCMS	affected 0 before 5.4.1; affected 0 before 5.3.1

CWE

CWE-79

References

https://jvn.jp/en/jp/JVN14353754
https://basercms.net/security/JVN_14353754

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.