Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/net.mingsoft/ms-mcms@5.2.8
Typemaven
Namespacenet.mingsoft
Namems-mcms
Version5.2.8
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version6.2.0
Latest_non_vulnerable_version6.2.0
Affected_by_vulnerabilities
0
url VCID-1dvk-u8u8-rybn
vulnerability_id VCID-1dvk-u8u8-rybn
summary Unrestricted Upload of File with Dangerous Type in MCMS
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-31943
reference_id
reference_type
scores
0
value 0.00568
scoring_system epss
scoring_elements 0.69092
published_at 2026-06-12T12:55:00Z
1
value 0.00568
scoring_system epss
scoring_elements 0.69
published_at 2026-06-11T12:55:00Z
2
value 0.00568
scoring_system epss
scoring_elements 0.69099
published_at 2026-06-14T12:55:00Z
3
value 0.00568
scoring_system epss
scoring_elements 0.69104
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-31943
1
reference_url https://github.com/ming-soft/MCMS/issues/95
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/ming-soft/MCMS/issues/95
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-31943
reference_id CVE-2022-31943
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-31943
3
reference_url https://github.com/advisories/GHSA-4828-473v-37gh
reference_id GHSA-4828-473v-37gh
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4828-473v-37gh
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@5.2.9
purl pkg:maven/net.mingsoft/ms-mcms@5.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f13-b11q-5bhb
1
vulnerability VCID-89ww-4py3-skdf
2
vulnerability VCID-8e99-y1r9-fyhw
3
vulnerability VCID-9ut2-sk5y-r7gg
4
vulnerability VCID-ffd6-2jck-mqb5
5
vulnerability VCID-mrxa-fwdh-yyfm
6
vulnerability VCID-py7n-se1p-zqde
7
vulnerability VCID-u2js-ny6g-fug2
8
vulnerability VCID-wy2q-tmdw-4fgt
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@5.2.9
aliases CVE-2022-31943, GHSA-4828-473v-37gh
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1dvk-u8u8-rybn
1
url VCID-1f13-b11q-5bhb
vulnerability_id VCID-1f13-b11q-5bhb
summary MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-47042
reference_id
reference_type
scores
0
value 0.00335
scoring_system epss
scoring_elements 0.56859
published_at 2026-06-13T12:55:00Z
1
value 0.00335
scoring_system epss
scoring_elements 0.56844
published_at 2026-06-12T12:55:00Z
2
value 0.00335
scoring_system epss
scoring_elements 0.56723
published_at 2026-06-11T12:55:00Z
3
value 0.00335
scoring_system epss
scoring_elements 0.56848
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-47042
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-47042
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-47042
2
reference_url https://github.com/advisories/GHSA-65v6-3c9m-hmrp
reference_id GHSA-65v6-3c9m-hmrp
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-65v6-3c9m-hmrp
3
reference_url https://gitee.com/mingSoft/MCMS/issues/I6592F
reference_id I6592F
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-02T15:19:05Z/
url https://gitee.com/mingSoft/MCMS/issues/I6592F
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@5.2.11
purl pkg:maven/net.mingsoft/ms-mcms@5.2.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8e99-y1r9-fyhw
1
vulnerability VCID-9ut2-sk5y-r7gg
2
vulnerability VCID-mrxa-fwdh-yyfm
3
vulnerability VCID-py7n-se1p-zqde
4
vulnerability VCID-wy2q-tmdw-4fgt
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@5.2.11
aliases CVE-2022-47042, GHSA-65v6-3c9m-hmrp
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1f13-b11q-5bhb
2
url VCID-7d57-w8c2-yucu
vulnerability_id VCID-7d57-w8c2-yucu
summary RCE in Mingsoft MCMS
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-22930
reference_id
reference_type
scores
0
value 0.10718
scoring_system epss
scoring_elements 0.93513
published_at 2026-06-12T12:55:00Z
1
value 0.10718
scoring_system epss
scoring_elements 0.93492
published_at 2026-06-11T12:55:00Z
2
value 0.10718
scoring_system epss
scoring_elements 0.93518
published_at 2026-06-14T12:55:00Z
3
value 0.10718
scoring_system epss
scoring_elements 0.93517
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-22930
1
reference_url https://github.com/ming-soft/MCMS/issues/98
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/ming-soft/MCMS/issues/98
2
reference_url https://web.archive.org/web/20220201022121/https://gitee.com/mingSoft/MCMS/issues/I4Q4M6
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20220201022121/https://gitee.com/mingSoft/MCMS/issues/I4Q4M6
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-22930
reference_id CVE-2022-22930
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-22930
4
reference_url https://github.com/advisories/GHSA-8wq7-hhjj-fpqv
reference_id GHSA-8wq7-hhjj-fpqv
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8wq7-hhjj-fpqv
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@5.2.9
purl pkg:maven/net.mingsoft/ms-mcms@5.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f13-b11q-5bhb
1
vulnerability VCID-89ww-4py3-skdf
2
vulnerability VCID-8e99-y1r9-fyhw
3
vulnerability VCID-9ut2-sk5y-r7gg
4
vulnerability VCID-ffd6-2jck-mqb5
5
vulnerability VCID-mrxa-fwdh-yyfm
6
vulnerability VCID-py7n-se1p-zqde
7
vulnerability VCID-u2js-ny6g-fug2
8
vulnerability VCID-wy2q-tmdw-4fgt
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@5.2.9
aliases CVE-2022-22930, GHSA-8wq7-hhjj-fpqv
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7d57-w8c2-yucu
3
url VCID-89ww-4py3-skdf
vulnerability_id VCID-89ww-4py3-skdf
summary Mingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at /content/list.do.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-50578
reference_id
reference_type
scores
0
value 0.34677
scoring_system epss
scoring_elements 0.97119
published_at 2026-06-11T12:55:00Z
1
value 0.34677
scoring_system epss
scoring_elements 0.97129
published_at 2026-06-14T12:55:00Z
2
value 0.34677
scoring_system epss
scoring_elements 0.97127
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-50578
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-50578
reference_id CVE-2023-50578
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-50578
2
reference_url https://github.com/advisories/GHSA-3vvh-8c65-32j4
reference_id GHSA-3vvh-8c65-32j4
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3vvh-8c65-32j4
3
reference_url https://gitee.com/mingSoft/MCMS/issues/I8MAJK
reference_id I8MAJK
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2024-03-05T15:58:23Z/
url https://gitee.com/mingSoft/MCMS/issues/I8MAJK
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@5.2.10
purl pkg:maven/net.mingsoft/ms-mcms@5.2.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f13-b11q-5bhb
1
vulnerability VCID-8e99-y1r9-fyhw
2
vulnerability VCID-9ut2-sk5y-r7gg
3
vulnerability VCID-mrxa-fwdh-yyfm
4
vulnerability VCID-py7n-se1p-zqde
5
vulnerability VCID-wy2q-tmdw-4fgt
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@5.2.10
aliases CVE-2023-50578, GHSA-3vvh-8c65-32j4
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-89ww-4py3-skdf
4
url VCID-8e99-y1r9-fyhw
vulnerability_id VCID-8e99-y1r9-fyhw
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-3990
reference_id
reference_type
scores
0
value 0.11956
scoring_system epss
scoring_elements 0.93922
published_at 2026-06-11T12:55:00Z
1
value 0.11956
scoring_system epss
scoring_elements 0.93942
published_at 2026-06-12T12:55:00Z
2
value 0.11956
scoring_system epss
scoring_elements 0.93947
published_at 2026-06-13T12:55:00Z
3
value 0.11956
scoring_system epss
scoring_elements 0.93948
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-3990
1
reference_url https://gitee.com/mingSoft/MCMS/issues/I7K4DQ
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://gitee.com/mingSoft/MCMS/issues/I7K4DQ
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-3990
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-3990
3
reference_url https://vuldb.com/?ctiid.235611
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://vuldb.com/?ctiid.235611
4
reference_url https://vuldb.com/?id.235611
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://vuldb.com/?id.235611
5
reference_url https://github.com/advisories/GHSA-rxvj-5mv6-j5mc
reference_id GHSA-rxvj-5mv6-j5mc
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rxvj-5mv6-j5mc
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@5.3.2
purl pkg:maven/net.mingsoft/ms-mcms@5.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9ut2-sk5y-r7gg
1
vulnerability VCID-mrxa-fwdh-yyfm
2
vulnerability VCID-py7n-se1p-zqde
3
vulnerability VCID-wy2q-tmdw-4fgt
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@5.3.2
aliases CVE-2023-3990, GHSA-rxvj-5mv6-j5mc
risk_score 1.6
exploitability 0.5
weighted_severity 3.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8e99-y1r9-fyhw
5
url VCID-9ut2-sk5y-r7gg
vulnerability_id VCID-9ut2-sk5y-r7gg
summary An arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-29287
reference_id
reference_type
scores
0
value 0.00155
scoring_system epss
scoring_elements 0.36181
published_at 2026-06-12T12:55:00Z
1
value 0.00155
scoring_system epss
scoring_elements 0.36002
published_at 2026-06-11T12:55:00Z
2
value 0.00155
scoring_system epss
scoring_elements 0.36193
published_at 2026-06-14T12:55:00Z
3
value 0.00155
scoring_system epss
scoring_elements 0.36204
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-29287
1
reference_url https://gitee.com/mingSoft/MCMS/commit/17679d8fae3df2b433478829b01ab05a56ffdbc8
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://gitee.com/mingSoft/MCMS/commit/17679d8fae3df2b433478829b01ab05a56ffdbc8
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-29287
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-29287
3
reference_url https://gist.github.com/erdan111/38dcb5150b523436fe01249b2542f02f#file-cve-2025-29287
reference_id 38dcb5150b523436fe01249b2542f02f#file-cve-2025-29287
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-04-21T14:58:12Z/
url https://gist.github.com/erdan111/38dcb5150b523436fe01249b2542f02f#file-cve-2025-29287
4
reference_url http://cms.com
reference_id cms.com
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-04-21T14:58:12Z/
url http://cms.com
5
reference_url https://github.com/advisories/GHSA-3922-2r6r-r4fv
reference_id GHSA-3922-2r6r-r4fv
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3922-2r6r-r4fv
6
reference_url https://gitee.com/mingSoft/MCMS/issues/IBOOTX
reference_id IBOOTX
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-04-21T14:58:12Z/
url https://gitee.com/mingSoft/MCMS/issues/IBOOTX
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@5.4.4
purl pkg:maven/net.mingsoft/ms-mcms@5.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mrxa-fwdh-yyfm
1
vulnerability VCID-py7n-se1p-zqde
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@5.4.4
aliases CVE-2025-29287, GHSA-3922-2r6r-r4fv
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9ut2-sk5y-r7gg
6
url VCID-cknt-tt5r-1bha
vulnerability_id VCID-cknt-tt5r-1bha
summary Mingsoft MCMS SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-36272
reference_id
reference_type
scores
0
value 0.00409
scoring_system epss
scoring_elements 0.61771
published_at 2026-06-12T12:55:00Z
1
value 0.00409
scoring_system epss
scoring_elements 0.6167
published_at 2026-06-11T12:55:00Z
2
value 0.00409
scoring_system epss
scoring_elements 0.61773
published_at 2026-06-14T12:55:00Z
3
value 0.00409
scoring_system epss
scoring_elements 0.61779
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-36272
1
reference_url https://github.com/ming-soft/MCMS/issues/97
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/ming-soft/MCMS/issues/97
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-36272
reference_id CVE-2022-36272
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-36272
3
reference_url https://github.com/advisories/GHSA-hmj3-mqgw-2fq6
reference_id GHSA-hmj3-mqgw-2fq6
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hmj3-mqgw-2fq6
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@5.2.9
purl pkg:maven/net.mingsoft/ms-mcms@5.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f13-b11q-5bhb
1
vulnerability VCID-89ww-4py3-skdf
2
vulnerability VCID-8e99-y1r9-fyhw
3
vulnerability VCID-9ut2-sk5y-r7gg
4
vulnerability VCID-ffd6-2jck-mqb5
5
vulnerability VCID-mrxa-fwdh-yyfm
6
vulnerability VCID-py7n-se1p-zqde
7
vulnerability VCID-u2js-ny6g-fug2
8
vulnerability VCID-wy2q-tmdw-4fgt
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@5.2.9
aliases CVE-2022-36272, GHSA-hmj3-mqgw-2fq6
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cknt-tt5r-1bha
7
url VCID-db9p-8dg3-tygr
vulnerability_id VCID-db9p-8dg3-tygr
summary A vulnerability, which was classified as problematic, was found in Mingsoft MCMS 5.2.8. Affected is an unknown function of the file search.do. The manipulation of the argument content_title leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-215112.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-4350
reference_id
reference_type
scores
0
value 0.00187
scoring_system epss
scoring_elements 0.40333
published_at 2026-06-11T12:55:00Z
1
value 0.00187
scoring_system epss
scoring_elements 0.40512
published_at 2026-06-14T12:55:00Z
2
value 0.00187
scoring_system epss
scoring_elements 0.40523
published_at 2026-06-13T12:55:00Z
3
value 0.00187
scoring_system epss
scoring_elements 0.40501
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-4350
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-4350
reference_id CVE-2022-4350
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-4350
2
reference_url https://github.com/advisories/GHSA-p46c-m4j7-mjvq
reference_id GHSA-p46c-m4j7-mjvq
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-p46c-m4j7-mjvq
3
reference_url https://gitee.com/mingSoft/MCMS/issues/I5MT8Y
reference_id I5MT8Y
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T16:55:17Z/
url https://gitee.com/mingSoft/MCMS/issues/I5MT8Y
4
reference_url https://vuldb.com/?id.215112
reference_id ?id.215112
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T16:55:17Z/
url https://vuldb.com/?id.215112
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@5.2.9
purl pkg:maven/net.mingsoft/ms-mcms@5.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f13-b11q-5bhb
1
vulnerability VCID-89ww-4py3-skdf
2
vulnerability VCID-8e99-y1r9-fyhw
3
vulnerability VCID-9ut2-sk5y-r7gg
4
vulnerability VCID-ffd6-2jck-mqb5
5
vulnerability VCID-mrxa-fwdh-yyfm
6
vulnerability VCID-py7n-se1p-zqde
7
vulnerability VCID-u2js-ny6g-fug2
8
vulnerability VCID-wy2q-tmdw-4fgt
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@5.2.9
aliases CVE-2022-4350, GHSA-p46c-m4j7-mjvq
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-db9p-8dg3-tygr
8
url VCID-ffd6-2jck-mqb5
vulnerability_id VCID-ffd6-2jck-mqb5
summary A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Article Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216499.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-4640
reference_id
reference_type
scores
0
value 0.00177
scoring_system epss
scoring_elements 0.3902
published_at 2026-06-11T12:55:00Z
1
value 0.00177
scoring_system epss
scoring_elements 0.39209
published_at 2026-06-14T12:55:00Z
2
value 0.00177
scoring_system epss
scoring_elements 0.39216
published_at 2026-06-13T12:55:00Z
3
value 0.00177
scoring_system epss
scoring_elements 0.39192
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-4640
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-4640
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-4640
2
reference_url https://github.com/advisories/GHSA-6rvv-h8g7-728w
reference_id GHSA-6rvv-h8g7-728w
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6rvv-h8g7-728w
3
reference_url https://gitee.com/mingSoft/MCMS/issues/I65KI5
reference_id I65KI5
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-04-09T18:53:09Z/
url https://gitee.com/mingSoft/MCMS/issues/I65KI5
4
reference_url https://vuldb.com/?id.216499
reference_id ?id.216499
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-04-09T18:53:09Z/
url https://vuldb.com/?id.216499
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@5.2.10
purl pkg:maven/net.mingsoft/ms-mcms@5.2.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f13-b11q-5bhb
1
vulnerability VCID-8e99-y1r9-fyhw
2
vulnerability VCID-9ut2-sk5y-r7gg
3
vulnerability VCID-mrxa-fwdh-yyfm
4
vulnerability VCID-py7n-se1p-zqde
5
vulnerability VCID-wy2q-tmdw-4fgt
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@5.2.10
aliases CVE-2022-4640, GHSA-6rvv-h8g7-728w
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ffd6-2jck-mqb5
9
url VCID-mrxa-fwdh-yyfm
vulnerability_id VCID-mrxa-fwdh-yyfm
summary A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-60837
reference_id
reference_type
scores
0
value 0.00024
scoring_system epss
scoring_elements 0.07272
published_at 2026-06-14T12:55:00Z
1
value 0.00024
scoring_system epss
scoring_elements 0.07237
published_at 2026-06-11T12:55:00Z
2
value 0.00024
scoring_system epss
scoring_elements 0.07279
published_at 2026-06-12T12:55:00Z
3
value 0.00024
scoring_system epss
scoring_elements 0.0727
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-60837
1
reference_url https://gist.github.com/xuzhiwei66666666/5cec37c9f674a08bc0d8654d42b4137a
reference_id 5cec37c9f674a08bc0d8654d42b4137a
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T20:34:02Z/
url https://gist.github.com/xuzhiwei66666666/5cec37c9f674a08bc0d8654d42b4137a
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-60837
reference_id CVE-2025-60837
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-60837
3
reference_url https://github.com/advisories/GHSA-wvv5-5g6x-hp7j
reference_id GHSA-wvv5-5g6x-hp7j
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-wvv5-5g6x-hp7j
4
reference_url https://gitee.com/mingSoft/MCMS
reference_id MCMS
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T20:34:02Z/
url https://gitee.com/mingSoft/MCMS
5
reference_url http://mcms.com
reference_id mcms.com
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T20:34:02Z/
url http://mcms.com
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@6.0.2
purl pkg:maven/net.mingsoft/ms-mcms@6.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-py7n-se1p-zqde
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@6.0.2
aliases CVE-2025-60837, GHSA-wvv5-5g6x-hp7j
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mrxa-fwdh-yyfm
10
url VCID-py7n-se1p-zqde
vulnerability_id VCID-py7n-se1p-zqde
summary A flaw has been found in mingSoft MCMS 6.1.1. The affected element is an unknown function of the file /ms/file/uploadTemplate.do of the component Template Archive Handler. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be used.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-2666
reference_id
reference_type
scores
0
value 0.00018
scoring_system epss
scoring_elements 0.04725
published_at 2026-06-11T12:55:00Z
1
value 0.00018
scoring_system epss
scoring_elements 0.04704
published_at 2026-06-14T12:55:00Z
2
value 0.00018
scoring_system epss
scoring_elements 0.04711
published_at 2026-06-13T12:55:00Z
3
value 0.00018
scoring_system epss
scoring_elements 0.04726
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-2666
1
reference_url https://github.com/chujianxin0101/vuln/issues/11
reference_id 11
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
1
value 4.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
2
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
3
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
4
value 2.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
5
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
6
value LOW
scoring_system generic_textual
scoring_elements
7
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-18T20:35:24Z/
url https://github.com/chujianxin0101/vuln/issues/11
2
reference_url https://github.com/chujianxin0101/vuln/issues/11#issue-3905144613
reference_id 11#issue-3905144613
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
1
value 4.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
2
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
3
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-18T20:35:24Z/
url https://github.com/chujianxin0101/vuln/issues/11#issue-3905144613
3
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mingsoft:mcms:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mingsoft:mcms:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mingsoft:mcms:*:*:*:*:*:*:*:*
4
reference_url https://vuldb.com/?ctiid.346463
reference_id ?ctiid.346463
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
1
value 4.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
2
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
3
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
4
value 2.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
5
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
6
value LOW
scoring_system generic_textual
scoring_elements
7
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-18T20:35:24Z/
url https://vuldb.com/?ctiid.346463
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-2666
reference_id CVE-2026-2666
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
1
value 2.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-2666
6
reference_url https://github.com/advisories/GHSA-r9wp-qq53-qvjx
reference_id GHSA-r9wp-qq53-qvjx
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-r9wp-qq53-qvjx
7
reference_url https://vuldb.com/?id.346463
reference_id ?id.346463
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
1
value 4.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
2
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
3
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
4
value 2.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
5
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
6
value LOW
scoring_system generic_textual
scoring_elements
7
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-18T20:35:24Z/
url https://vuldb.com/?id.346463
8
reference_url https://vuldb.com/?submit.753243
reference_id ?submit.753243
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
1
value 4.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
2
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
3
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
4
value 2.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
5
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
6
value LOW
scoring_system generic_textual
scoring_elements
7
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-18T20:35:24Z/
url https://vuldb.com/?submit.753243
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@6.2.0
purl pkg:maven/net.mingsoft/ms-mcms@6.2.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@6.2.0
aliases CVE-2026-2666, GHSA-r9wp-qq53-qvjx
risk_score 2.6
exploitability 0.5
weighted_severity 5.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-py7n-se1p-zqde
11
url VCID-u2js-ny6g-fug2
vulnerability_id VCID-u2js-ny6g-fug2
summary A vulnerability was found in Mingsoft MCMS up to 5.2.9. It has been classified as critical. Affected is an unknown function of the file /cms/category/list. The manipulation of the argument sqlWhere leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 5.2.10 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-215196.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-4375
reference_id
reference_type
scores
0
value 0.26228
scoring_system epss
scoring_elements 0.96421
published_at 2026-06-11T12:55:00Z
1
value 0.26228
scoring_system epss
scoring_elements 0.96432
published_at 2026-06-12T12:55:00Z
2
value 0.26228
scoring_system epss
scoring_elements 0.96434
published_at 2026-06-14T12:55:00Z
3
value 0.26228
scoring_system epss
scoring_elements 0.96431
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-4375
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-4375
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-4375
2
reference_url https://github.com/advisories/GHSA-hc5g-xf64-j49j
reference_id GHSA-hc5g-xf64-j49j
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hc5g-xf64-j49j
3
reference_url https://gitee.com/mingSoft/MCMS/issues/I61TG5
reference_id I61TG5
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T16:55:11Z/
url https://gitee.com/mingSoft/MCMS/issues/I61TG5
4
reference_url https://vuldb.com/?id.215196
reference_id ?id.215196
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T16:55:11Z/
url https://vuldb.com/?id.215196
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@5.2.10
purl pkg:maven/net.mingsoft/ms-mcms@5.2.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f13-b11q-5bhb
1
vulnerability VCID-8e99-y1r9-fyhw
2
vulnerability VCID-9ut2-sk5y-r7gg
3
vulnerability VCID-mrxa-fwdh-yyfm
4
vulnerability VCID-py7n-se1p-zqde
5
vulnerability VCID-wy2q-tmdw-4fgt
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@5.2.10
aliases CVE-2022-4375, GHSA-hc5g-xf64-j49j
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u2js-ny6g-fug2
12
url VCID-wy2q-tmdw-4fgt
vulnerability_id VCID-wy2q-tmdw-4fgt
summary File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-22567
reference_id
reference_type
scores
0
value 0.015
scoring_system epss
scoring_elements 0.81608
published_at 2026-06-13T12:55:00Z
1
value 0.015
scoring_system epss
scoring_elements 0.81599
published_at 2026-06-14T12:55:00Z
2
value 0.015
scoring_system epss
scoring_elements 0.81539
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-22567
1
reference_url https://github.com/h3ak/MCMS-CVE-Request
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/h3ak/MCMS-CVE-Request
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-22567
reference_id CVE-2024-22567
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-22567
3
reference_url https://github.com/advisories/GHSA-7qw4-9r68-2rmx
reference_id GHSA-7qw4-9r68-2rmx
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7qw4-9r68-2rmx
4
reference_url https://github.com/h3ak/MCMS-CVE-Request/
reference_id MCMS-CVE-Request
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-21T20:30:50Z/
url https://github.com/h3ak/MCMS-CVE-Request/
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@5.3.6
purl pkg:maven/net.mingsoft/ms-mcms@5.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9ut2-sk5y-r7gg
1
vulnerability VCID-mrxa-fwdh-yyfm
2
vulnerability VCID-py7n-se1p-zqde
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@5.3.6
aliases CVE-2024-22567, GHSA-7qw4-9r68-2rmx
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wy2q-tmdw-4fgt
13
url VCID-yg9p-a7vs-7qa5
vulnerability_id VCID-yg9p-a7vs-7qa5
summary Mingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-36599
reference_id
reference_type
scores
0
value 0.00508
scoring_system epss
scoring_elements 0.66855
published_at 2026-06-12T12:55:00Z
1
value 0.00508
scoring_system epss
scoring_elements 0.66762
published_at 2026-06-11T12:55:00Z
2
value 0.00508
scoring_system epss
scoring_elements 0.66869
published_at 2026-06-14T12:55:00Z
3
value 0.00508
scoring_system epss
scoring_elements 0.66868
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-36599
1
reference_url https://gitee.com/mingSoft/MCMS/issues/I5I1P5
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://gitee.com/mingSoft/MCMS/issues/I5I1P5
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-36599
reference_id CVE-2022-36599
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-36599
3
reference_url https://github.com/advisories/GHSA-w3rc-2whg-w934
reference_id GHSA-w3rc-2whg-w934
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w3rc-2whg-w934
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@5.2.9
purl pkg:maven/net.mingsoft/ms-mcms@5.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1f13-b11q-5bhb
1
vulnerability VCID-89ww-4py3-skdf
2
vulnerability VCID-8e99-y1r9-fyhw
3
vulnerability VCID-9ut2-sk5y-r7gg
4
vulnerability VCID-ffd6-2jck-mqb5
5
vulnerability VCID-mrxa-fwdh-yyfm
6
vulnerability VCID-py7n-se1p-zqde
7
vulnerability VCID-u2js-ny6g-fug2
8
vulnerability VCID-wy2q-tmdw-4fgt
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@5.2.9
aliases CVE-2022-36599, GHSA-w3rc-2whg-w934
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yg9p-a7vs-7qa5
Fixing_vulnerabilities
0
url VCID-ct37-y95y-rygm
vulnerability_id VCID-ct37-y95y-rygm
summary SQL injection in net.mingsoft:ms-mcms
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-26585
reference_id
reference_type
scores
0
value 0.57488
scoring_system epss
scoring_elements 0.98199
published_at 2026-06-11T12:55:00Z
1
value 0.57488
scoring_system epss
scoring_elements 0.98206
published_at 2026-06-12T12:55:00Z
2
value 0.57488
scoring_system epss
scoring_elements 0.98207
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-26585
1
reference_url https://gitee.com/mingSoft/MCMS/issues/I4W1S9
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://gitee.com/mingSoft/MCMS/issues/I4W1S9
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-26585
reference_id CVE-2022-26585
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-26585
3
reference_url https://github.com/advisories/GHSA-mx3x-rmrh-9wf6
reference_id GHSA-mx3x-rmrh-9wf6
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mx3x-rmrh-9wf6
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@5.2.8
purl pkg:maven/net.mingsoft/ms-mcms@5.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dvk-u8u8-rybn
1
vulnerability VCID-1f13-b11q-5bhb
2
vulnerability VCID-7d57-w8c2-yucu
3
vulnerability VCID-89ww-4py3-skdf
4
vulnerability VCID-8e99-y1r9-fyhw
5
vulnerability VCID-9ut2-sk5y-r7gg
6
vulnerability VCID-cknt-tt5r-1bha
7
vulnerability VCID-db9p-8dg3-tygr
8
vulnerability VCID-ffd6-2jck-mqb5
9
vulnerability VCID-mrxa-fwdh-yyfm
10
vulnerability VCID-py7n-se1p-zqde
11
vulnerability VCID-u2js-ny6g-fug2
12
vulnerability VCID-wy2q-tmdw-4fgt
13
vulnerability VCID-yg9p-a7vs-7qa5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@5.2.8
aliases CVE-2022-26585, GHSA-mx3x-rmrh-9wf6
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ct37-y95y-rygm
1
url VCID-h4qw-ssyx-xkhd
vulnerability_id VCID-h4qw-ssyx-xkhd
summary Code injection in MCMS
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-30506
reference_id
reference_type
scores
0
value 0.02652
scoring_system epss
scoring_elements 0.8614
published_at 2026-06-12T12:55:00Z
1
value 0.02652
scoring_system epss
scoring_elements 0.8609
published_at 2026-06-11T12:55:00Z
2
value 0.02652
scoring_system epss
scoring_elements 0.86148
published_at 2026-06-14T12:55:00Z
3
value 0.02652
scoring_system epss
scoring_elements 0.86151
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-30506
1
reference_url https://gitee.com/mingSoft/MCMS/issues/I56AID
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://gitee.com/mingSoft/MCMS/issues/I56AID
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-30506
reference_id CVE-2022-30506
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-30506
3
reference_url https://github.com/advisories/GHSA-6xj9-hpq3-w3qw
reference_id GHSA-6xj9-hpq3-w3qw
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6xj9-hpq3-w3qw
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@5.2.8
purl pkg:maven/net.mingsoft/ms-mcms@5.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dvk-u8u8-rybn
1
vulnerability VCID-1f13-b11q-5bhb
2
vulnerability VCID-7d57-w8c2-yucu
3
vulnerability VCID-89ww-4py3-skdf
4
vulnerability VCID-8e99-y1r9-fyhw
5
vulnerability VCID-9ut2-sk5y-r7gg
6
vulnerability VCID-cknt-tt5r-1bha
7
vulnerability VCID-db9p-8dg3-tygr
8
vulnerability VCID-ffd6-2jck-mqb5
9
vulnerability VCID-mrxa-fwdh-yyfm
10
vulnerability VCID-py7n-se1p-zqde
11
vulnerability VCID-u2js-ny6g-fug2
12
vulnerability VCID-wy2q-tmdw-4fgt
13
vulnerability VCID-yg9p-a7vs-7qa5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@5.2.8
aliases CVE-2022-30506, GHSA-6xj9-hpq3-w3qw
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h4qw-ssyx-xkhd
2
url VCID-k9bn-yapg-47gm
vulnerability_id VCID-k9bn-yapg-47gm
summary Cross Site Request Forgery in Mingsoft MCMS
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-29647
reference_id
reference_type
scores
0
value 0.00382
scoring_system epss
scoring_elements 0.60115
published_at 2026-06-12T12:55:00Z
1
value 0.00382
scoring_system epss
scoring_elements 0.60007
published_at 2026-06-11T12:55:00Z
2
value 0.00382
scoring_system epss
scoring_elements 0.60119
published_at 2026-06-14T12:55:00Z
3
value 0.00382
scoring_system epss
scoring_elements 0.60127
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-29647
1
reference_url https://gist.github.com/aaaahuia/f708c6c8a320e0f3afbb9247903c4670
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://gist.github.com/aaaahuia/f708c6c8a320e0f3afbb9247903c4670
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-29647
reference_id CVE-2022-29647
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-29647
3
reference_url https://github.com/advisories/GHSA-gp39-qj5f-43qv
reference_id GHSA-gp39-qj5f-43qv
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-gp39-qj5f-43qv
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@5.2.8
purl pkg:maven/net.mingsoft/ms-mcms@5.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dvk-u8u8-rybn
1
vulnerability VCID-1f13-b11q-5bhb
2
vulnerability VCID-7d57-w8c2-yucu
3
vulnerability VCID-89ww-4py3-skdf
4
vulnerability VCID-8e99-y1r9-fyhw
5
vulnerability VCID-9ut2-sk5y-r7gg
6
vulnerability VCID-cknt-tt5r-1bha
7
vulnerability VCID-db9p-8dg3-tygr
8
vulnerability VCID-ffd6-2jck-mqb5
9
vulnerability VCID-mrxa-fwdh-yyfm
10
vulnerability VCID-py7n-se1p-zqde
11
vulnerability VCID-u2js-ny6g-fug2
12
vulnerability VCID-wy2q-tmdw-4fgt
13
vulnerability VCID-yg9p-a7vs-7qa5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@5.2.8
aliases CVE-2022-29647, GHSA-gp39-qj5f-43qv
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k9bn-yapg-47gm
3
url VCID-smcf-f3d2-wffg
vulnerability_id VCID-smcf-f3d2-wffg
summary Cross Site Request Forgery in Mingsoft MCMS
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-27340
reference_id
reference_type
scores
0
value 0.003
scoring_system epss
scoring_elements 0.5388
published_at 2026-06-12T12:55:00Z
1
value 0.003
scoring_system epss
scoring_elements 0.53754
published_at 2026-06-11T12:55:00Z
2
value 0.003
scoring_system epss
scoring_elements 0.53883
published_at 2026-06-14T12:55:00Z
3
value 0.003
scoring_system epss
scoring_elements 0.53897
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-27340
1
reference_url https://github.com/UDKI11/vul/blob/main/Mcms%E8%B7%A8%E7%AB%99%E8%AF%B7%E6%B1%82%E4%BC%AA%E9%80%A0.docx
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/UDKI11/vul/blob/main/Mcms%E8%B7%A8%E7%AB%99%E8%AF%B7%E6%B1%82%E4%BC%AA%E9%80%A0.docx
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-27340
reference_id CVE-2022-27340
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-27340
3
reference_url https://github.com/advisories/GHSA-g94p-h263-c26q
reference_id GHSA-g94p-h263-c26q
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-g94p-h263-c26q
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@5.2.8
purl pkg:maven/net.mingsoft/ms-mcms@5.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dvk-u8u8-rybn
1
vulnerability VCID-1f13-b11q-5bhb
2
vulnerability VCID-7d57-w8c2-yucu
3
vulnerability VCID-89ww-4py3-skdf
4
vulnerability VCID-8e99-y1r9-fyhw
5
vulnerability VCID-9ut2-sk5y-r7gg
6
vulnerability VCID-cknt-tt5r-1bha
7
vulnerability VCID-db9p-8dg3-tygr
8
vulnerability VCID-ffd6-2jck-mqb5
9
vulnerability VCID-mrxa-fwdh-yyfm
10
vulnerability VCID-py7n-se1p-zqde
11
vulnerability VCID-u2js-ny6g-fug2
12
vulnerability VCID-wy2q-tmdw-4fgt
13
vulnerability VCID-yg9p-a7vs-7qa5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@5.2.8
aliases CVE-2022-27340, GHSA-g94p-h263-c26q
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-smcf-f3d2-wffg
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@5.2.8