CSV File Injection Vulnerability in BaserCMS from BaserCMS Users Community
CVE-2026-65875

5.1MEDIUM

Key Information:

Vendor: Basercms Users Community
Status: Basercms
Vendor: CVE Published:; 3 August 2026

🔔 Create Basercms Users Community Vulnerability Alert

What is CVE-2026-65875?

A CSV file injection vulnerability in BaserCMS allows attackers to embed malicious code within CSV files. When unsuspecting users download and open these files, the injected code can execute, potentially leading to unauthorized actions on their systems. It is crucial for users to remain vigilant and ensure that their BaserCMS installations are updated to the latest versions to mitigate this threat effectively.

Affected Version(s)

BaserCMS 0 < 5.3.0

References

https://basercms.net/security/JVN_94952030

https://jvn.jp/en/vu/JVNVU94952030/

CVSS V4

Score:

5.1

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

Unknown

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 3, 2026
Vulnerability Reserved
Jul 23, 2026

CVE-2026-65875 Data

JSON