CVE
CVE-2026-30880
baserCMS has OS command injection vulnerability in installer
baserCMS has an OS command injection vulnerability in the installer.
Target
baserCMS 5.2.2 and earlier versions
Vulnerability
If baserCMS is placed on a server but not installed, malicious commands may be executed.
Countermeasures
Update to the latest version of baserCMS
Please refer to the following page to reference for more information.
https://basercms.net/security/JVN_54513170
Credits
REN XINGDIAN
Package Versions Affected
Package Version
patch Availability
No items found.
Automatically patch vulnerabilities without upgrading
Fix Without Upgrading
Detect compatible fix
Apply safe remediation
Fix with a single pull request
CVSS Version
Severity
Base Score
CVSS Version
Score Vector
C
H
U
9.2
-
4.0
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
C
H
U
0
-
C
H
U
-
Related Resources
No items found.
References
https://github.com/baserproject/basercms/security/advisories/GHSA-6hpg-8rx3-cwgv, https://nvd.nist.gov/vuln/detail/CVE-2026-30880, https://basercms.net/security/JVN_20837860, https://github.com/baserproject/basercms, https://github.com/baserproject/basercms/releases/tag/5.2.3
Basic Information
Ecosystem
