[CRITICAL] baserCMS has OS Command Injection Leading to Remote Code Execution (RCE)

PKSA-xyh3-vpd8-cdnh CVE-2026-21861 GHSA-qxmc-6f24-g86g

Affected package: baserproject/basercms

Affected version: <=5.2.2

Reported by:
GitHub