https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T09:45:44.159250+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-278349 EUVD-2026-278349 2026-10-06T09:45:44.225079+00:00 EUVD-2026-278349 https://cve.radiocsirt.org/vuln/fkie_cve-2026-32734 fkie_cve-2026-32734 2026-10-06T09:45:44.225117+00:00

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has DOM-based cross-site scripting in tag creation. This issue has been patched in version 5.2.3.

 https://cve.radiocsirt.org/vuln/ghsa-677c-xv24-crgx GHSA-677c-xv24-crgx — baserCMS is Vulnerable to Cross-site Scripting 2026-10-06T09:45:44.225149+00:00

Affected: Packagist: baserproject/basercms

baserCMS has DOM-based cross-site scripting in tag creation.

### Target baserCMS 5.2.2 and earlier versions

### Vulnerability Malicious JavaScript may be executed when creating a tag.

### Countermeasures Update to the latest version of baserCMS

Please refer to the following page to reference for more information. https://basercms.net/security/JVN_94952030

### Credits

- quanlna2 (Le Nguyen Anh Quan) - namdi (Do Ich Nam) - minhnn42 (Nguyen Ngoc Minh) - VCSLab - Viettel Cyber Security

 https://cve.radiocsirt.org/vuln/jvndb-2026-000047 jvndb-2026-000047 2026-10-06T09:45:44.225181+00:00

baserCMS provided by baserCMS User Community contains multiple vulnerabilities listed below.<a href='https://cwe.mitre.org/data/definitions/79.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/78.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/89.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/79.html' target='_blank'></a><ul><li>Cross-site scripting (CWE-79) - CVE-2026-30879</li><li>OS command injection (CWE-78) - CVE-2026-30880</li><li>SQL injection (CWE-89) - CVE-2026-27697</li><li>Cross-site scripting (CWE-79) - CVE-2026-32734</li></ul>CVE-2026-30879 Gai Tanaka of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. quanlna2 (Le Nguyen Anh Quan), namdi (Do Ich Nam), minhnn42 (Nguyen Ngoc Minh) of VCSLab - Viettel Cyber Security reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-30880 REN XINGDIAN reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-27697 Mirai Matsumoto of Future Secure Wave, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-32734 quanlna2 (Le Nguyen Anh Quan), namdi (Do Ich Nam), minhnn42 (Nguyen Ngoc Minh) of VCSLab - Viettel…