What is GHSA-vh89-rjph-2g7p?

GHSA-vh89-rjph-2g7p is a security advisory published by GitHub Security Advisories with Medium severity. baserCMS has an SQL injection vulnerability in its blog post functionality

Which CVE IDs does GHSA-vh89-rjph-2g7p cover?

GHSA-vh89-rjph-2g7p covers the following CVE IDs: CVE-2026-27697. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-vh89-rjph-2g7p?

GHSA-vh89-rjph-2g7p affects 1 product, including: composer/baserproject/basercms:\u003c= 5.2.2.

GHSA-vh89-rjph-2g7pMedium

baserCMS has an SQL injection vulnerability in its blog post functionality

Vendor

GitHub Security Advisories

Published

March 31, 2026

Last Modified

March 31, 2026

🔗 CVE IDs covered (1)

CVE-2026-27697 →

📋 Description

baserCMS has a SQL injection vulnerability in blog posts.

Target

baserCMS 5.2.2 and earlier versions

Vulnerability

Malicious SQL may be executed in blog posts.

Countermeasures

Update to the latest version of baserCMS

Please refer to the following page to reference for more information. https://basercms.net/security/JVN_52157568

Credits

Mirai Matsumoto@Future Secure Wave, Inc.

🎯 Affected products1

composer/baserproject/basercms:<= 5.2.2

🔗 References (5)

https://github.com/baserproject/basercms/security/advisories/GHSA-vh89-rjph-2g7p
https://nvd.nist.gov/vuln/detail/CVE-2026-27697
https://basercms.net/security/JVN_20837860
https://github.com/baserproject/basercms/releases/tag/5.2.3
https://github.com/advisories/GHSA-vh89-rjph-2g7p