A vulnerability labeled as critical has been found in baserproject basercms up to 5.2.2. Affected by this issue is some unknown functionality of the component Blog Post Handler. Executing a manipulation can lead to sql injection. This vulnerability is tracked as CVE-2026-27697. The attack can be launched remotely. The affected component should be upgraded.
| Vendor | Product | Versions |
|---|---|---|
| baserproject | basercms | < 5.2.3 |
Updated severity to CRITICAL, added new description, and noted that no exploit exists.
Initial creation
