https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:11:56.219501+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-233392 EUVD-2026-233392 2026-10-03T15:11:56.285213+00:00 EUVD-2026-233392 https://cve.radiocsirt.org/vuln/fkie_cve-2022-39325 fkie_cve-2022-39325 2026-10-03T15:11:56.285252+00:00

BaserCMS is a content management system with a japanese language focus. In affected versions there is a cross-site scripting vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. Users of baserCMS are advised to upgrade as soon as possible. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-395x-wv32-44v5 GHSA-395x-wv32-44v5 — baserproject/basercms vulnerable to cross-site scripting (XSS) vulnerability 2026-10-03T15:11:56.285287+00:00

Affected: Packagist: baserproject/basercms

There is a cross-site scripting vulnerability on the management system of baserCMS.

This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible.

### Target baserCMS 4.7.1 and earlier versions.

### Vulnerability Execution of malicious JavaScript code may alter the display of the page or leak cookie information. - In Favorite registration (CVE-2022-39325) - In Permission Settings (CVE-2022-41994) - In User group management (CVE-2022-42486)

### Countermeasures Update to the latest version of baserCMS

### Credits - Shogo Iyota@Mitsui Bussan Secure Directions, Inc. - YUYA KOTAKE@CARTA HOLDINGS, INC.

 https://cve.radiocsirt.org/vuln/gsd-2022-39325 gsd-2022-39325 2026-10-03T15:11:56.285320+00:00 gsd-2022-39325 https://cve.radiocsirt.org/vuln/jvndb-2022-000094 jvndb-2022-000094 2026-10-03T15:11:56.285332+00:00

baserCMS provided by baserCMS Users Community contains multiple cross-site scripting vulnerabilities listed below. * Stored cross-site scripting vulnerability in User management (CWE-79) - CVE-2022-39325 * Stored cross-site scripting vulnerability in Permission Settings (CWE-79) - CVE-2022-41994 * Stored cross-site scripting vulnerability in User group management (CWE-79) - CVE-2022-42486 CVE-2022-39325 YUYA KOTAKE of CARTA HOLDINGS, INC. and Shogo Iyota of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2022-41994, CVE-2022-42486 Shogo Iyota of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.