CVE-2026-30880

CRITICAL

baserCMS: OS command injection vulnerability in installer

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-30880 has a selected CVSS score of 9.2 (critical).

Description

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has an OS command injection vulnerability in the installer. This issue has been patched in version 5.2.3.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 31, 2026 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

basercms

Browse baserproject / basercms
CVE List< 5.2.3affected

baserproject/basercms

Browse Packagist / baserproject/basercms
GitHub AdvisoryBefore 5.2.3 · Fixed in 5.2.3affected

References

5