PT-2026-29151 · Baserproject · Basercms

Published 2026-03-31 · Updated 2026-03-31 · CVE-2026-30880

Mitre

CVSS v4.0

9.2

Critical

AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has an OS command injection vulnerability in the installer. This issue has been patched in version 5.2.3.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-30880

Affected Products

Basercms

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-30880 · Security Note
• https://github.com/baserproject/basercms/security/advisories/GHSA-6hpg-8rx3-cwgv · Note
• https://basercms.net/security/JVN_20837860 · Note
• https://github.com/baserproject/basercms/releases/tag/5.2.3 · Note