CVE-2026-93463
Received Received - Intake

Cross-Site Scripting in baserCMS via Script Validation Bypass

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: JPCERT/CC

Description
Cross-Site Scripting via Script Validation Bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser may be caused.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-09-30
AI Q&A
2026-09-30
EPSS Evaluated
N/A
NVD
CVE-2026-93463
EUVD
EUVD-2026-89661

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
basercms basercms *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Cross-Site Scripting (XSS) issue in baserCMS caused by a script validation bypass. It allows an attacker to inject malicious scripts into web pages viewed by users, potentially executing arbitrary code in their browsers.

Detection Guidance

Detection requires checking for Cross-Site Scripting (XSS) vulnerabilities in baserCMS. Manually review input validation in scripts and test with payloads like <script>alert(1)</script> in form fields. Use automated tools such as OWASP ZAP or Burp Suite to scan for XSS flaws.

Impact Analysis

If exploited, this vulnerability could allow attackers to steal user sessions, deface websites, or perform actions on behalf of users. It may compromise user data, credentials, or interactions with the affected application.

Compliance Impact

This vulnerability could lead to data breaches, violating GDPR and HIPAA requirements for protecting user data. Organizations may face fines, legal consequences, and reputational damage due to non-compliance.

Mitigation Strategies

Update baserCMS to the latest patched version immediately. Implement strict input validation and output encoding for all user-supplied data. Use Content Security Policy (CSP) headers to mitigate XSS impact. Disable unnecessary scripts and review server-side validation rules.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-93463. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart