https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:36:27.296327+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2023-93330 cnvd-2023-93330 2026-10-03T20:36:27.359988+00:00 cnvd-2023-93330 https://cve.radiocsirt.org/vuln/euvd-2026-161755 EUVD-2026-161755 2026-10-03T20:36:27.360025+00:00 EUVD-2026-161755 https://cve.radiocsirt.org/vuln/fkie_cve-2023-43792 fkie_cve-2023-43792 2026-10-03T20:36:27.360039+00:00

baserCMS is a website development framework. In versions 4.6.0 through 4.7.6, there is a Code Injection vulnerability in the mail form of baserCMS. As of time of publication, no known patched versions are available.

 https://cve.radiocsirt.org/vuln/ghsa-vrm6-c878-fpq6 GHSA-vrm6-c878-fpq6 — baserCMS Code Injection Vulnerability in Mail Form Feature 2026-10-03T20:36:27.360068+00:00

Affected: Packagist: baserproject/basercms

There is a Code Injection Vulnerability in Mail Form to baserCMS.

### Target baserCMS 4.7.6 and earlier versions

### Vulnerability Malicious code may be executed in Mail Form Feature.

### Countermeasures Update to the latest version of baserCMS

Please refer to the following page to reference for more information. https://basercms.net/security/JVN_45547161

### Credits Shiga Takuma@BroadBand Security, Inc

 https://cve.radiocsirt.org/vuln/gsd-2023-43792 gsd-2023-43792 2026-10-03T20:36:27.360097+00:00 gsd-2023-43792 https://cve.radiocsirt.org/vuln/jvndb-2023-000106 jvndb-2023-000106 2026-10-03T20:36:27.360109+00:00

baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below.<ul><li>Stored cross-site scripting vulnerability (CWE-79) - CVE-2023-29009</li><li>Reflected cross-site scripting vulnerability (CWE-79) - CVE-2023-43647</li><li>Directory traversal vulnerability (CWE-22) - CVE-2023-43648</li><li>Cross-site request forgery vulnerability (CWE-352) - CVE-2023-43649</li><li>Arbitrary file upload vulnerability (CWE-434) - CVE-2023-43792</li></ul> CVE-2023-29009 Kyohei Ota reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2023-43647, CVE-2023-43648, CVE-2023-43649, CVE-2023-43792 Shiga Takuma of BroadBand Security, Inc reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.