A reflected cross-site scripting XSS vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload...
6.1CVSS6.3AI score0.00204EPSS
SaveExploits0References3
osv_cve•added 2025/10/10 6:15 p.m.•14 views
CVE-2025-60838
An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code via uploading a crafted file...