https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:45:02.870764+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-93919 cnvd-2021-93919 2026-10-07T00:45:02.949960+00:00 cnvd-2021-93919 https://cve.radiocsirt.org/vuln/euvd-2026-30436 EUVD-2026-30436 2026-10-07T00:45:02.950001+00:00 EUVD-2026-30436 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39136 fkie_cve-2021-39136 2026-10-07T00:45:02.950015+00:00

baserCMS is an open source content management system with a focus on Japanese language support. In affected versions there is a cross-site scripting vulnerability in the file upload function of the management system of baserCMS. Users are advised to update as soon as possible. No workaround are available to mitigate this issue.

 https://cve.radiocsirt.org/vuln/ghsa-hgjr-632x-qpp3 GHSA-hgjr-632x-qpp3 — Cross-site scripting vulnerability in file upload 2026-10-07T00:45:02.950047+00:00

Affected: Packagist: baserproject/basercms

There is a cross-site scripting vulnerability in file upload on the management system of baserCMS.

This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible.

### Target baserCMS 4.5.1 and earlier versions

### Vulnerability Execution of malicious JavaScript code may alter the display of the page or leak cookie information.

### Countermeasures Update to the latest version of baserCMS

Please refer to the next page for details. https://basercms.net/security/JVN_14134801

 https://cve.radiocsirt.org/vuln/gsd-2021-39136 gsd-2021-39136 2026-10-07T00:45:02.950078+00:00 gsd-2021-39136 https://cve.radiocsirt.org/vuln/jvndb-2021-000080 jvndb-2021-000080 2026-10-07T00:45:02.950090+00:00

baserCMS provided by baserCMS Users Community contains a cross-site scripting vulnerability (CWE-79). Akagi Yusuke of NTT-ME CORPORATION reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.