GitHub Advisoryadvisory · Packagist

GHSA-677c-xv24-crgx baserCMS is Vulnerable to Cross-site Scripting

HIGH Published 2026-03-31 Modified 2026-03-31 Official page ↗
Aliases
CVE-2026-32734
Ecosystem
Packagist
Packages
baserproject/basercms
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Weaknesses
CWE-79
Reviewed
2026-03-31

Affected packages

• Packagist baserproject/basercms: < 5.2.3 → fixed in 5.2.3

Description

baserCMS has DOM-based cross-site scripting in tag creation. Target baserCMS 5.2.2 and earlier versions Vulnerability Malicious JavaScript may be executed when creating a tag. Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference for more information. https://basercms.net/security/JVN_94952030 Credits • quanlna2 (Le Nguyen Anh Quan) • namdi (Do Ich Nam) • minhnn42 (Nguyen Ngoc Minh) • VCSLab - Viettel Cyber Security

Related

Alias · CVE (1)

  • CVE-2026-32734 baserCMS is a website development framework. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References