2 matches found
CVE-2025-56316
A SQL injection vulnerability in the contenttitle parameter of the /cms/content/list endpoint in MCMS 5.5.0 allows remote attackers to execute arbitrary SQL queries via unsanitized input in the FreeMarker template rendering...
9.8CVSS8.5AI score0.00594EPSS
SaveExploits1References1
MCMS vulnerable SQL injection via the content_title parameter
A SQL injection vulnerability in the contenttitle parameter of the /cms/content/list endpoint in MCMS 5.5.0 through 6.0.1 allows remote attackers to execute arbitrary SQL queries via unsanitized input in the FreeMarker template rendering...
9.8CVSS8.6AI score0.00594EPSS
SaveExploits1References5Affected Software1
20