CVE-2026-115480

The baserCMS website development framework (versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2 ) contains a vulnerability where the public POST /baser/api/bc-mail/mail_messages/add/{mailContentId}.json endpoint fails to enforce the auth_captcha setting. The root cause is that BcMail Controller Ap...