Form Submission Vulnerability in baserCMS Framework by baserproject
CVE-2026-115480
5.3MEDIUM
What is CVE-2026-115480?
A vulnerability exists in baserCMS versions prior to 5.3.2 and 5.4.2, where the public API endpoint allows unauthenticated submissions bypassing CAPTCHA verification. As a result, attackers can exploit this flaw to send unsolicited messages, potentially leading to spam in administrators' inboxes. Additionally, it can trigger unwanted auto-replies and populate the database with numerous entries if the save_info option is enabled. While the lack of rate limiting further exacerbates the issue, it is separate from other security measures already in place in the API.
Affected Version(s)
basercms >= 5.0.0, < 5.3.2 < 5.0.0, 5.3.2
basercms >= 5.4.0, < 5.4.2 < 5.4.0, 5.4.2