baserCMS is a website development framework. Prior to version 5.2.3, baserCMS contains an OS command injection vulnerability in the core update functionality. A…

baserCMS, a website development framework, contains an OS command injection vulnerability in its core update functionality prior to version 5.2.3. Authenticated administrators can execute arbitrary OS commands on the server due to improper handling of user-controlled input passed directly to exec() without sufficient validation or escaping. The vulnerability allows for complete server compromise through command execution. The issue has been patched in version 5.2.3. Users should immediately upgrade to the patched version to mitigate this critical security risk.