CVE-2026-30880 | baserproject basercms up to 5.2.2 Installer os command injection (GHSA-6hpg-8rx3-cwgv)

A vulnerability marked as critical has been reported in baserproject basercms up to 5.2.2. This affects an unknown part of the component Installer. The manipulation leads to os command injection.

This vulnerability is listed as CVE-2026-30880. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More