CVE-2026-93464
A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.
- Published Sep 30, 2026
- CVSS 5.1 medium
- 0.1% chance of exploitation in the next 30 days (EPSS)