Mcms Security Vulnerabilities and Issues — Mcms CVE List

Lucene search

MingsoftMcms

2 matches found

CVE•added 2022/04/05 1:15 a.m.•104 views

CVE-2022-26585

Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list.

9.8CVSS9.8AI score0.33843EPSS

CVE•added 2022/04/22 8:15 p.m.•89 views

CVE-2022-27340

MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data.

8.8CVSS8.8AI score0.00285EPSS