The vulnerability occurs when list and detail actions in the Admin and Api/Admin sections of baserCMS accept user-provided query parameters without proper sanitization. This flaw allows an authenticated administrator to embed SQL fragments in the options that are passed directly to the ORM, enabling execution of arbitrary SQL statements. An attacker can read sensitive data such as password hashes from the users table and potentially manipulate the database, resulting in loss of confidentiality and integrity. The weakness falls under the common identifier for SQL injection.

Versions of baserCMS released before 5.3.2 and before 5.4.2 are affected, specifically 5.0.0 to 5.3.1 and 5.4.0 to 5.4.1. The application is developed by baserproject and the products impacted are the basercms framework. The issue has been fixed in baserCMS 5.3.2 and 5.4.2, which should be used to remediate the risk.

The CVSS score of 8.8 classifies this as a high severity flaw, and although the EPSS score is not listed, the lack of listing in CISA KEV does not diminish the threat. The flaw is exploitable by any user who can authenticate to the admin panel or API; the attacker can supply crafted query parameters through the web interface or programmatic API calls and trigger unwanted SQL statements. No additional privileged escalation is required beyond administrative access, making it an in-place attack that can compromise the application database and its stored credentials.