https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:38:02.944513+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01607 bdu:2024-01607 2026-10-04T15:38:03.083373+00:00 bdu:2024-01607 https://cve.radiocsirt.org/vuln/cnvd-2024-13537 cnvd-2024-13537 2026-10-04T15:38:03.083442+00:00 cnvd-2024-13537 https://cve.radiocsirt.org/vuln/euvd-2026-10552 EUVD-2026-10552 2026-10-04T15:38:03.083472+00:00 EUVD-2026-10552 https://cve.radiocsirt.org/vuln/fkie_cve-2023-51450 fkie_cve-2023-51450 2026-10-04T15:38:03.083498+00:00

baserCMS is a website development framework. Prior to version 5.0.9, there is an OS Command Injection vulnerability in the site search feature of baserCMS. Version 5.0.9 contains a fix for this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-77fc-4cv5-hmfr GHSA-77fc-4cv5-hmfr — baserCMS OS command injection vulnerability in Installer 2026-10-04T15:38:03.083560+00:00

Affected: Packagist: baserproject/basercms

There is a OS command injection in Installer Feature to baserCMS.

### Target baserCMS 5.0.8 and earlier versions

### Vulnerability Malicious command may be executed in Installer.

### Countermeasures Update to the latest version of baserCMS

Please refer to the following page to reference for more information. https://basercms.net/security/JVN_73283159

 https://cve.radiocsirt.org/vuln/gsd-2023-51450 gsd-2023-51450 2026-10-04T15:38:03.083623+00:00 gsd-2023-51450 https://cve.radiocsirt.org/vuln/jvndb-2024-000022 jvndb-2024-000022 2026-10-04T15:38:03.083649+00:00

baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. <ul> <li>Reflected cross-site scripting vulnerability in Site search Feature (CWE-79) - CVE-2023-44379</li> <li>Stored cross-site scripting vulnerability in Content Management (CWE-79) - CVE-2024-26128</li> <li>OS command injection vulnerability (CWE-78) - CVE-2023-51450</li> </ul> CVE-2023-44379 Yusuke Uchida of PERSOL CROSS TECHNOLOGY CO., LTD. (Not affiliated at the time of report submission) reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2024-26128 Kentaro Ishii of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2023-51450 Shunsuke Tanizaki reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.