https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T21:33:02.811124+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-232570 EUVD-2026-232570 2026-10-04T21:33:02.877381+00:00 EUVD-2026-232570 https://cve.radiocsirt.org/vuln/fkie_cve-2023-44379 fkie_cve-2023-44379 2026-10-04T21:33:02.877418+00:00

baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the site search feature. Version 5.0.9 contains a fix for this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-66c2-p8rh-qx87 GHSA-66c2-p8rh-qx87 — baserCMS Cross-site Scripting vulnerability in Site search Feature 2026-10-04T21:33:02.877453+00:00

Affected: Packagist: baserproject/basercms

There is a XSS Vulnerability in Site search Feature to baserCMS.

### Target baserCMS 5.0.8 and earlier versions

### Vulnerability Malicious code may be executed in Site search Feature.

### Countermeasures Update to the latest version of baserCMS

Please refer to the following page to reference for more information. https://basercms.net/security/JVN_73283159

 https://cve.radiocsirt.org/vuln/gsd-2023-44379 gsd-2023-44379 2026-10-04T21:33:02.877483+00:00 gsd-2023-44379 https://cve.radiocsirt.org/vuln/jvndb-2024-000022 jvndb-2024-000022 2026-10-04T21:33:02.877497+00:00

baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. <ul> <li>Reflected cross-site scripting vulnerability in Site search Feature (CWE-79) - CVE-2023-44379</li> <li>Stored cross-site scripting vulnerability in Content Management (CWE-79) - CVE-2024-26128</li> <li>OS command injection vulnerability (CWE-78) - CVE-2023-51450</li> </ul> CVE-2023-44379 Yusuke Uchida of PERSOL CROSS TECHNOLOGY CO., LTD. (Not affiliated at the time of report submission) reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2024-26128 Kentaro Ishii of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2023-51450 Shunsuke Tanizaki reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.