A reflected cross-site scripting XSS vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload...
6.1CVSS5.9AI score0.00188EPSS
SaveExploits0References3
OSV•added 2025/10/10 6:15 p.m.•5 views
CVE-2025-60838
An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code via uploading a crafted file...