CVE-2026-30877 in baserproject basercms
Sumário (Inglês)
baserCMS is a website development framework. Prior to version 5.2.3, there is an OS command injection vulnerability in the update functionality. Due to this issue, an authenticated user with administrator privileges in baserCMS can execute arbitrary OS commands on the server with the privileges of the user account running baserCMS. This issue has been patched in version 5.2.3.
Responsável
GitHub_M
Reservar
06/03/2026
Divulgação
31/03/2026
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 354317 | baserproject basercms User Account update Elevação de Privilégios | 78 | Não definido | Correção oficial | CVE-2026-30877 |