CVE-2026-30878 in basercms

Sumário (Inglês)

baserCMS is a website development framework. Prior to version 5.2.3, a public mail submission API allows unauthenticated users to submit mail form entries even when the corresponding form is not accepting submissions. This bypasses administrative controls intended to stop form intake and enables spam or abuse via the API. This issue has been patched in version 5.2.3.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsável

GitHub_M

Reservar

06/03/2026

Divulgação

31/03/2026

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
354318	baserproject basercms Submission API Elevação de Privilégios	285	Não definido	Correção oficial	CVE-2026-30878

Fontes

• MITRE
• NVD
• CVE Details