CVE-2026-34591

creationtimestamp| type| source ---|---|--- 2026-03-31 03:49:17+00:00| published-proof-of-concept| https://github.com/python-poetry/poetry/security/advisories/GHSA-2599-h6xx-hpxp 2026-04-02 19:26:58+00:00| published-proof-of-concept| Telegram/7DVhAvDfvaCSFfrp-315YEAfd2kaZp9OZJgmE0wwvo2i8o...

GHSA-677C-XV24-CRGX

creationtimestamp| type| source ---|---|--- 2026-03-31 03:17:25+00:00| seen| Telegram/v8IgW6gHpWVIushUEONWR1rBf1AadyMpGfLyvEGnY-900sw...

Cross-site Scripting (XSS)

Overview baserproject/basercms is a Content management system based on CakePHP. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the tag creation process. An attacker can execute arbitrary scripts in the context of the user's browser by crafting malicious input...

CVE-2026-32734

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has DOM-based cross-site scripting in tag creation. This issue has been patched in version 5.2.3...

CVE-2026-32734 baserCMS: Multiple vulnerabilities in baserCMS

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has DOM-based cross-site scripting in tag creation. This issue has been patched in version 5.2.3...

CVE-2026-32734 baserCMS: Multiple vulnerabilities in baserCMS

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has DOM-based cross-site scripting in tag creation. This issue has been patched in version 5.2.3...

CVE-2026-32734 baserCMS: Multiple vulnerabilities in baserCMS

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has DOM-based cross-site scripting in tag creation. This issue has been patched in version 5.2.3...

CVE-2026-32734

CVE-2026-32734 concerns baserCMS, a website development framework. According to the provided documents, prior to version 5.2.3 baserCMS is vulnerable to a DOM-based cross-site scripting (XSS) issue in tag creation. The vulnerability is described as allowing malicious JavaScript execution in the b...

PT-2026-29255

Stored cross-site scripting XSS in Checkmk 2.5.0 beta before 2.5.0b2 allows authenticated users with permission to create hosts or services to execute arbitrary JavaScript in the browsers of other users performing searches in the Unified Search feature...

📄 WordPress Datalogics Ecommerce Delivery Privilege Escalation

WordPress Datalogics Ecommerce Delivery plugin versions prior to 2.6.60 suffer from a privilege escalation vulnerability. ===============================================================================================================================================================================...

PT-2026-29153

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has DOM-based cross-site scripting in tag creation. This issue has been patched in version 5.2.3...

baserCMS 跨站脚本漏洞

BaserCMS is a corporate-level content management system CMS developed by the BaserCMS team. Versions of BaserCMS prior to 5.2.3 had a cross-site scripting vulnerability, which originated from DOM-based cross-site scripting during tag creation...

GHSA-FF8H-P5VC-WCWC

creationtimestamp| type| source ---|---|--- 2026-03-30 23:20:36+00:00| seen| Telegram/aYCyNSm85uFE8xgl3G3j-Sn1NnPkfaU1HaAlO581ff2GeJQ...

GHSA-7JJ6-4R42-W9H6

creationtimestamp| type| source ---|---|--- 2026-03-30 23:20:18+00:00| seen| Telegram/qLRVxcBpXTmPFtTmfhugZI-eibNxK7vt9WwygicfOox0-Q...

GHSA-55QG-VVGJ-FFH4

creationtimestamp| type| source ---|---|--- 2026-03-30 23:20:18+00:00| seen| Telegram/qLRVxcBpXTmPFtTmfhugZI-eibNxK7vt9WwygicfOox0-Q...

GHSA-V8VP-X4Q4-2VCH

creationtimestamp| type| source ---|---|--- 2026-03-30 23:20:18+00:00| seen| Telegram/qLRVxcBpXTmPFtTmfhugZI-eibNxK7vt9WwygicfOox0-Q...

GHSA-RPJR-985C-QHVM

creationtimestamp| type| source ---|---|--- 2026-03-30 23:20:18+00:00| seen| Telegram/qLRVxcBpXTmPFtTmfhugZI-eibNxK7vt9WwygicfOox0-Q...

CVE-2026-21861

creationtimestamp| type| source ---|---|--- 2026-03-30 23:04:28+00:00| published-proof-of-concept| https://github.com/baserproject/basercms/security/advisories/GHSA-qxmc-6f24-g86g 2026-03-30 23:16:35+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-21861...

CVE-2026-33986

creationtimestamp| type| source ---|---|--- 2026-03-30 22:20:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micp3op2br2m 2026-03-30 23:20:23+00:00| published-proof-of-concept| Telegram/dTdXmSClQuUutduSI7B7lq8U0lWyZCa4SY-4SfXv6kqarNA 2026-03-31 00:13:06+00:00| seen|...

CVE-2026-4257

creationtimestamp| type| source ---|---|--- 2026-03-30 22:20:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micp3b722d27 2026-03-30 23:20:36+00:00| seen| Telegram/aYCyNSm85uFE8xgl3G3j-Sn1NnPkfaU1HaAlO581ff2GeJQ 2026-03-31 00:00:42+00:00| seen|...