CVE-2025-4326

CVE-2025-4326 – MRCMS 3.1.2 Add Fragment Page (endpoint /admin/chip/add.do) exposes XSS vulnerability. The vulnerability arises from improper processing of the Add Fragment Page component’s file handling, allowing cross-site scripting. It is described as exploitable remotely, with exploitation di...