baserCMS User Community vulnerabilities
Published CVEs affecting baserCMS User Community products: 4 record(s), with severity, exploitation and fixes.
CVE-2026-93464
Medium · 5.4
CWE-79 Sep 30, 2026
Cross-site Scripting (XSS) in baserCMS User Community baserCMS
A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.
CVE-2026-93463
Medium · 5.4
CWE-79 Sep 30, 2026
Cross-site Scripting (XSS) in baserCMS User Community baserCMS
A cross-site scripting vulnerability via script validation bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.
CVE-2026-93462
Medium · 5.3
CWE-306 Sep 30, 2026
Missing Authentication for Critical Function in baserCMS User Community baserCMS
A missing authentication for critical function vulnerability exists in baserCMS. If this vulnerability is exploited, a remote attacker may obtain sensitive information.
CVE-2026-93460
Medium · 5.4
CWE-79 Sep 30, 2026
Cross-site Scripting (XSS) in baserCMS User Community baserCMS
A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.