CVE-2026-30879: baserCMS: Cross-site scripting vulnerability in blog post
baserCMS has a cross-site scripting vulnerability in blog posts.
Target baserCMS 5.2.1 and earlier versions
Vulnerability
Malicious Javascript may be executed in blog posts.
Countermeasures Update to the latest version of baserCMS
Please refer to the following page to reference for more information. https://basercms.net/security/JVN20837860
Credits
Gai Tanaka@Mitsui Bussan Secure Directions, Inc.
Other sources
baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a cross-site scripting vulnerability in blog posts. This issue has been patched in version 5.2.3.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-30879?
The severity of CVE-2026-30879 is classified as high due to its cross-site scripting nature, which can allow attackers to execute malicious scripts.
How do I fix CVE-2026-30879?
To fix CVE-2026-30879, upgrade baserCMS to version 5.2.3 or later, where this vulnerability is patched.
Who is affected by CVE-2026-30879?
CVE-2026-30879 affects users of baserCMS versions prior to 5.2.3.
What kind of attack does CVE-2026-30879 facilitate?
CVE-2026-30879 facilitates cross-site scripting attacks, which can compromise user data and security.
Was CVE-2026-30879 patched?
Yes, CVE-2026-30879 was patched in version 5.2.3 of baserCMS.