CVE-2026-30879 baserCMS: Cross-site scripting vulnerability in blog post

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a cross-site scripting vulnerability in blog posts. This issue has been patched in version 5.2.3...

CVE-2026-30879

Summary: CVE-2026-30879 affects baserCMS prior to version 5.2.3, where a cross-site scripting (XSS) vulnerability in blog posts could be exploited. The issue is resolved by updating to version 5.2.3. Affected software: baserCMS (website development framework). Vulnerability details (from connecte...

CVE-2026-27697 baserCMS: SQL injection vulnerability in blog post

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a SQL injection vulnerability in blog posts. This issue has been patched in version 5.2.3...

CVE-2026-27697

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a SQL injection vulnerability in blog posts. This issue has been patched in version 5.2.3...

CVE-2026-27697 baserCMS: SQL injection vulnerability in blog post

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a SQL injection vulnerability in blog posts. This issue has been patched in version 5.2.3...

CVE-2026-27697

CVE-2026-27697 affects baserCMS before version 5.2.3, where a SQL injection vulnerability exists in the blog posts functionality. The issue, traced to the blog post handling, can allow an attacker to execute arbitrary SQL statements. BasercMS has patched this in 5.2.3; users on earlier versions s...

CVE-2026-27697 baserCMS: SQL injection vulnerability in blog post

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a SQL injection vulnerability in blog posts. This issue has been patched in version 5.2.3...

PT-2026-29311

Name of the Vulnerable Software and Affected Versions Discourse versions 2026.1.0 through 2026.1.2 Discourse versions 2026.2.0 through 2026.2.1 Discourse versions 2026.3.0 through 2026.2.9 Description Discourse, an open-source discussion platform, had a flaw where non-staff users could view read...

PT-2026-29147

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a SQL injection vulnerability in blog posts. This issue has been patched in version 5.2.3...

Discourse 信息泄露漏洞

Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from an information disclosure vulnerability that stems from non-employee users having access to read receipt informati...

PT-2026-29150

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a cross-site scripting vulnerability in blog posts. This issue has been patched in version 5.2.3...

CVE-2026-30877

creationtimestamp| type| source ---|---|--- 2026-03-30 23:16:35+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-30877 2026-03-31 01:17:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micyxxy37f2s 2026-03-31 01:18:01+00:00| seen|...

CVE-2026-21861

creationtimestamp| type| source ---|---|--- 2026-03-30 23:04:28+00:00| published-proof-of-concept| https://github.com/baserproject/basercms/security/advisories/GHSA-qxmc-6f24-g86g 2026-03-30 23:16:35+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-21861...

CVE-2026-32877

creationtimestamp| type| source ---|---|--- 2026-03-30 22:01:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micnzxtlyh2w 2026-03-30 22:03:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mico4444la2m 2026-03-30 23:20:18+00:00| seen|...

CVE-2026-29924

creationtimestamp| type| source ---|---|--- 2026-03-30 20:03:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3michgcnljw2q 2026-03-30 21:00:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mickl67qbu25 2026-03-30 21:37:12+00:00| seen|...

CVE-2026-35668

creationtimestamp| type| source ---|---|--- 2026-03-30 18:31:02+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-hr5v-j9h9-xjhg 2026-04-10 18:51:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj5yk5jlhg2t 2026-04-10 19:31:00+00:00| published-proof-of-concept...

CVE-2026-32286

creationtimestamp| type| source ---|---|--- 2026-03-30 16:40:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mic42ki7j52r 2026-03-30 16:40:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mic43epj2a2s 2026-03-30 17:22:57+00:00| seen|...

CVE-2026-3573

creationtimestamp| type| source ---|---|--- 2026-03-30 16:40:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mic42cdyon2m 2026-03-30 16:40:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mic434xgjq2w 2026-03-30 17:23:21+00:00|...

CVE-2026-4933

creationtimestamp| type| source ---|---|--- 2026-03-30 16:39:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mic42264i42r 2026-03-30 16:40:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mic42vvjtq2s 2026-03-30 17:23:21+00:00|...

WordPress Frontend Admin by DynamiApps plugin <= 3.28.31 - Authenticated (Editor+) PHP Object Injection via 'post_content' of Admin Form Posts vulnerability

Authenticated Editor+ PHP Object Injection via 'postcontent' of Admin Form Posts vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os - krei.dev | ogbuilders.io in WordPress Plugin Frontend Admin by DynamiApps versions = 3.28.31...