https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:37:52.316930+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-23791 cnvd-2021-23791 2026-10-03T15:37:52.479820+00:00 cnvd-2021-23791 https://cve.radiocsirt.org/vuln/euvd-2026-21742 EUVD-2026-21742 2026-10-03T15:37:52.479855+00:00 EUVD-2026-21742 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20683 fkie_cve-2021-20683 2026-10-03T15:37:52.479869+00:00

Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-v9w8-hq92-v39m GHSA-v9w8-hq92-v39m — Cross-site Scripting (XSS) in baserCMS 2026-10-03T15:37:52.479904+00:00

Affected: Packagist: baserproject/basercms

Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2021-20683 gsd-2021-20683 2026-10-03T15:37:52.479928+00:00 gsd-2021-20683 https://cve.radiocsirt.org/vuln/jvndb-2021-000027 jvndb-2021-000027 2026-10-03T15:37:52.479940+00:00

baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. *Improper Neutralization of JavaScript input in the page editing function (CWE-79) - CVE-2021-20681 *OS command injection (CWE-78) - CVE-2021-20682 *Improper Neutralization of JavaScript input in the blog article editing function (CWE-79) - CVE-2021-20683 CVE-2021-20681, CVE-2021-20682 Sho Odagiri of Information Science College reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20683 Yamaguchi Kakeru reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.