Product

BaserCMS (5.0.0 - 5.3.1, 5.4.0 - 5.4.1)

1 brief RSS

baserCMS: SQL injection in administrative prefixes (CVE-2026-114621)

baserCMS versions 5.0.0 through 5.3.1 and 5.4.0 through 5.4.1 contain an SQL injection vulnerability in the Admin and Api/Admin interfaces allowing authenticated users to execute arbitrary SQL queries.

baserCMS +1 web-application sqli authentication xss cms

2t 2c updated 49m ago