https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:07:02.099466+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-197402 EUVD-2026-197402 2026-10-06T19:07:02.165456+00:00 EUVD-2026-197402 https://cve.radiocsirt.org/vuln/fkie_cve-2024-46996 fkie_cve-2024-46996 2026-10-06T19:07:02.165497+00:00

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Blog posts feature. Version 5.1.2 fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-66jv-qrm3-vvfg GHSA-66jv-qrm3-vvfg — baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature 2026-10-06T19:07:02.165531+00:00

Affected: Packagist: baserproject/basercms

XSS vulnerability in Blog posts feature to baserCMS.

### Target baserCMS 5.1.1 and earlier versions

### Vulnerability Malicious code may be executed in Blog posts feature.

### Countermeasures Update to the latest version of baserCMS

Please refer to the following page to reference for more information. https://basercms.net/security/JVN_00876083

### Credits Ayato Shitomi＠Fore-Z

 https://cve.radiocsirt.org/vuln/jvndb-2024-000114 jvndb-2024-000114 2026-10-06T19:07:02.165564+00:00

baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below.<ul><li>Stored cross-site scripting vulnerability due to inappropriate Slug handling on Article Edit (CWE-79) - CVE-2024-46996</li><li>Stored cross-site scripting vulnerability on Edit Email Form Settings (CWE-79) - CVE-2024-46998</li><li>Reflected cross-site scripting vulnerability due to inadequate error page generation process (CWE-81) - CVE-2024-46995</li><li>Stored cross-site scripting vulnerability due to inappropriate input data handling on Article Edit and Content List (CWE-79) - CVE-2024-46994</li></ul>CVE-2024-46996 Ayato Shitomi of Fore-Z co.ltd and Rikuto Tauchi reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2024-46998 Ayato Shitomi of Fore-Z co.ltd reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2024-46995 Yusuke Uchida of PERSOL CROSS TECHNOLOGY CO., LTD. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2024-46994 Kyohei Ota of LEON TECHNOLOGY,Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.