CVE-2026-114621 | baserproject BaserCMS up to 5.3.1/5.4.1 Admin/Api/Admin Actions contain/conditions/fields/finder/order sql injection (EUVD-2026-108991)

October 23, 2026 Yanac

A vulnerability, which was classified as problematic, was found in baserproject BaserCMS up to 5.3.1/5.4.1. Affected is an unknown function of the component Admin/Api/Admin Actions. The manipulation of the argument contain/conditions/fields/finder/order results in sql injection.

This vulnerability is reported as CVE-2026-114621. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More