~ / search / GHSA-vh89-rjph-2g7p

GHSA-vh89-rjph-2g7p

baserCMS has an SQL injection vulnerability in its blog post functionality

Source: GitHub Advisory Database (reviewed) Moderate CVE-2026-27697

Packages

EcosystemPackageAffectedFixed in
Packagist baserproject/basercms < 5.2.3 5.2.3

Details

As written in the advisory (Markdown source, shown as plain text).

baserCMS has a SQL injection vulnerability in blog posts. ### Target baserCMS 5.2.2 and earlier versions ### Vulnerability Malicious SQL may be executed in blog posts. ### Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference for more information. https://basercms.net/security/JVN_52157568 ### Credits Mirai Matsumoto@Future Secure Wave, Inc.

References

External links from the advisory. They lead to third-party sites.