CVE-2022-27340

MCMS v5.2.7 contains a Cross-Site Request Forgery CSRF via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data...

CVE-2022-27340

MCMS v5.2.7 is affected by a Cross-Site Request Forgery via the /role/saveOrUpdateRole.do endpoint. The vulnerability allows an attacker to escalate privileges and modify data, effectively bypassing intended actions on behalf of an authenticated user. Root cause cited across multiple sources is C...

CVE-2022-27340

MCMS v5.2.7 contains a Cross-Site Request Forgery CSRF via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data...

CVE-2022-26585

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list...