What is GHSA-jmq3-x8q7-j9qm?

GHSA-jmq3-x8q7-j9qm is a security advisory published by GitHub Security Advisories with Medium severity. baserCMS has a cross-site scripting vulnerability in blog posts

Which CVE IDs does GHSA-jmq3-x8q7-j9qm cover?

GHSA-jmq3-x8q7-j9qm covers the following CVE IDs: CVE-2026-30879. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-jmq3-x8q7-j9qm?

GHSA-jmq3-x8q7-j9qm affects 1 product, including: composer/baserproject/basercms:\u003c= 5.2.2.

GHSA-jmq3-x8q7-j9qmMedium

baserCMS has a cross-site scripting vulnerability in blog posts

Vendor

GitHub Security Advisories

Published

March 31, 2026

Last Modified

March 31, 2026

🔗 CVE IDs covered (1)

CVE-2026-30879 →

📋 Description

baserCMS has a cross-site scripting vulnerability in blog posts.

Target

baserCMS 5.2.1 and earlier versions

Vulnerability

Malicious Javascript may be executed in blog posts.

Countermeasures

Update to the latest version of baserCMS

Please refer to the following page to reference for more information. https://basercms.net/security/JVN_20837860

Credits

Gai Tanaka@Mitsui Bussan Secure Directions, Inc.

🎯 Affected products1

composer/baserproject/basercms:<= 5.2.2

🔗 References (5)

https://github.com/baserproject/basercms/security/advisories/GHSA-jmq3-x8q7-j9qm
https://nvd.nist.gov/vuln/detail/CVE-2026-30879
https://basercms.net/security/JVN_20837860
https://github.com/baserproject/basercms/releases/tag/5.2.3
https://github.com/advisories/GHSA-jmq3-x8q7-j9qm