baserCMS DOM-Based Cross-Site Scripting Vulnerability in Tag Creation

Vulnerability

A DOM-based cross-site scripting vulnerability has been identified in baserCMS versions prior to 5.2.3. This issue allows for the execution of malicious JavaScript when creating tags. The vulnerability is present in the blog tag functionality of baserCMS.

Impact

Exploitation of this vulnerability allows for the execution of arbitrary JavaScript in the context of the user creating the tag.

Remediation

Users are advised to update baserCMS to version 5.2.3 or later.

Added: Mar 31, 2026, 1:19 AM
Updated: Mar 31, 2026, 1:19 AM

Vulnerability Rating

Custom Algorithm
spread
3.4
impact
1.7
exploitability
6.4
remediation
7.7
relevance
5.0
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.