CVE-2026-93464: XSS
Published Sep 30, 2026
·Updated
Stored Cross-Site Scripting via custom content descriptions vulnerability exists in baserCMS . If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser may be caused.
Affected Software
1 affected component
baserCMS BaserCMS
Event History
Sep 30, 2026
CVE Published
via MITRE·07:34 AM
Data Sourced
via MITRE·07:34 AM
DescriptionSeverity
Data Sourced
via NVD·08:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access and user interaction are required for exploitation?
An attacker needs privileges to create or modify custom content descriptions. A user must then view the stored malicious content in a browser for the script to execute.
2
What could an attacker do after successful exploitation?
The vulnerability can execute arbitrary script in the viewing user's browser. The reported impacts include limited confidentiality and integrity effects, with scope changed.