GHSA-677c-xv24-crgxHighCVSS 7.1

baserCMS is Vulnerable to Cross-site Scripting

Published
March 31, 2026
Last Modified
March 31, 2026

🔗 CVE IDs covered (1)

CVE-2026-32734 →

📋 Description

baserCMS has DOM-based cross-site scripting in tag creation.

Target

baserCMS 5.2.2 and earlier versions

Vulnerability

Malicious JavaScript may be executed when creating a tag.

Countermeasures

Update to the latest version of baserCMS

Please refer to the following page to reference for more information. https://basercms.net/security/JVN_94952030

Credits

  • quanlna2 (Le Nguyen Anh Quan)
  • namdi (Do Ich Nam)
  • minhnn42 (Nguyen Ngoc Minh)
  • VCSLab - Viettel Cyber Security

🎯 Affected products1

  • composer/baserproject/basercms:<= 5.2.2

🔗 References (5)