https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:17:44.282227+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-23789 cnvd-2021-23789 2026-10-04T06:17:44.363845+00:00 cnvd-2021-23789 https://cve.radiocsirt.org/vuln/euvd-2026-21711 EUVD-2026-21711 2026-10-04T06:17:44.363885+00:00 EUVD-2026-21711 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20681 fkie_cve-2021-20681 2026-10-04T06:17:44.363900+00:00

Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-24p5-x9f9-vvpx GHSA-24p5-x9f9-vvpx — Cross-site Scripting (XSS) in baserCMS 2026-10-04T06:17:44.363929+00:00

Affected: Packagist: baserproject/basercms

Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2021-20681 gsd-2021-20681 2026-10-04T06:17:44.363953+00:00 gsd-2021-20681 https://cve.radiocsirt.org/vuln/jvndb-2021-000027 jvndb-2021-000027 2026-10-04T06:17:44.363965+00:00

baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. *Improper Neutralization of JavaScript input in the page editing function (CWE-79) - CVE-2021-20681 *OS command injection (CWE-78) - CVE-2021-20682 *Improper Neutralization of JavaScript input in the blog article editing function (CWE-79) - CVE-2021-20683 CVE-2021-20681, CVE-2021-20682 Sho Odagiri of Information Science College reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20683 Yamaguchi Kakeru reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.