CVE-2026-116216

MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveData that allows unauthenticated attackers to set arbitrary maccomment columns including userid. Attackers can submit anonymous comments with a crafted userid parameter to attribute them to any...