CVE-2026-27697

MEDIUM

baserCMS: SQL injection vulnerability in blog post

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-27697 has a selected CVSS score of 6.9 (medium).

Description

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a SQL injection vulnerability in blog posts. This issue has been patched in version 5.2.3.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 31, 2026 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

basercms

Browse baserproject / basercms
CVE List< 5.2.3affected

baserproject/basercms

Browse Packagist / baserproject/basercms
GitHub AdvisoryBefore 5.2.3 · Fixed in 5.2.3affected

References

5