medium5.4
CVE-2026-93460
A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS.
Impact
A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.