Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/net.mingsoft/ms-mcms@6.0.1
Typemaven
Namespacenet.mingsoft
Namems-mcms
Version6.0.1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version6.2.0
Latest_non_vulnerable_version6.2.0
Affected_by_vulnerabilities
0
url VCID-1aeq-vrbg-ayf9
vulnerability_id VCID-1aeq-vrbg-ayf9
summary A SQL injection vulnerability in the content_title parameter of the /cms/content/list endpoint in MCMS 5.5.0 allows remote attackers to execute arbitrary SQL queries via unsanitized input in the FreeMarker template rendering.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-56316
reference_id
reference_type
scores
0
value 0.00156
scoring_system epss
scoring_elements 0.36156
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-56316
1
reference_url https://github.com/ming-soft/MCMS/commit/35ccbf1e3d38ab6aa178524a47c38dff6b448b59
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/ming-soft/MCMS/commit/35ccbf1e3d38ab6aa178524a47c38dff6b448b59
2
reference_url https://gist.github.com/Erosion2020/5892757e0c6eeb647a218d1c3b323cff
reference_id 5892757e0c6eeb647a218d1c3b323cff
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-10-20T19:53:05Z/
url https://gist.github.com/Erosion2020/5892757e0c6eeb647a218d1c3b323cff
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-56316
reference_id CVE-2025-56316
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-56316
4
reference_url https://github.com/advisories/GHSA-54wc-49qj-5ghj
reference_id GHSA-54wc-49qj-5ghj
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-54wc-49qj-5ghj
5
reference_url https://github.com/ming-soft/MCMS
reference_id MCMS
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-10-20T19:53:05Z/
url https://github.com/ming-soft/MCMS
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@6.0.2
purl pkg:maven/net.mingsoft/ms-mcms@6.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-py7n-se1p-zqde
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@6.0.2
aliases CVE-2025-56316, GHSA-54wc-49qj-5ghj
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1aeq-vrbg-ayf9
1
url VCID-mrxa-fwdh-yyfm
vulnerability_id VCID-mrxa-fwdh-yyfm
summary A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-60837
reference_id
reference_type
scores
0
value 0.00024
scoring_system epss
scoring_elements 0.07237
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-60837
1
reference_url https://gist.github.com/xuzhiwei66666666/5cec37c9f674a08bc0d8654d42b4137a
reference_id 5cec37c9f674a08bc0d8654d42b4137a
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T20:34:02Z/
url https://gist.github.com/xuzhiwei66666666/5cec37c9f674a08bc0d8654d42b4137a
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-60837
reference_id CVE-2025-60837
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-60837
3
reference_url https://github.com/advisories/GHSA-wvv5-5g6x-hp7j
reference_id GHSA-wvv5-5g6x-hp7j
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-wvv5-5g6x-hp7j
4
reference_url https://gitee.com/mingSoft/MCMS
reference_id MCMS
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T20:34:02Z/
url https://gitee.com/mingSoft/MCMS
5
reference_url http://mcms.com
reference_id mcms.com
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T20:34:02Z/
url http://mcms.com
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@6.0.2
purl pkg:maven/net.mingsoft/ms-mcms@6.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-py7n-se1p-zqde
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@6.0.2
aliases CVE-2025-60837, GHSA-wvv5-5g6x-hp7j
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mrxa-fwdh-yyfm
2
url VCID-py7n-se1p-zqde
vulnerability_id VCID-py7n-se1p-zqde
summary A flaw has been found in mingSoft MCMS 6.1.1. The affected element is an unknown function of the file /ms/file/uploadTemplate.do of the component Template Archive Handler. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be used.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-2666
reference_id
reference_type
scores
0
value 0.00018
scoring_system epss
scoring_elements 0.04725
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-2666
1
reference_url https://github.com/chujianxin0101/vuln/issues/11
reference_id 11
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
1
value 4.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
2
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
3
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
4
value 2.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
5
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
6
value LOW
scoring_system generic_textual
scoring_elements
7
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-18T20:35:24Z/
url https://github.com/chujianxin0101/vuln/issues/11
2
reference_url https://github.com/chujianxin0101/vuln/issues/11#issue-3905144613
reference_id 11#issue-3905144613
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
1
value 4.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
2
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
3
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-18T20:35:24Z/
url https://github.com/chujianxin0101/vuln/issues/11#issue-3905144613
3
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mingsoft:mcms:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mingsoft:mcms:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mingsoft:mcms:*:*:*:*:*:*:*:*
4
reference_url https://vuldb.com/?ctiid.346463
reference_id ?ctiid.346463
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
1
value 4.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
2
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
3
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
4
value 2.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
5
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
6
value LOW
scoring_system generic_textual
scoring_elements
7
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-18T20:35:24Z/
url https://vuldb.com/?ctiid.346463
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-2666
reference_id CVE-2026-2666
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
1
value 2.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-2666
6
reference_url https://github.com/advisories/GHSA-r9wp-qq53-qvjx
reference_id GHSA-r9wp-qq53-qvjx
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-r9wp-qq53-qvjx
7
reference_url https://vuldb.com/?id.346463
reference_id ?id.346463
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
1
value 4.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
2
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
3
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
4
value 2.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
5
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
6
value LOW
scoring_system generic_textual
scoring_elements
7
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-18T20:35:24Z/
url https://vuldb.com/?id.346463
8
reference_url https://vuldb.com/?submit.753243
reference_id ?submit.753243
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
1
value 4.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
2
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
3
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
4
value 2.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
5
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
6
value LOW
scoring_system generic_textual
scoring_elements
7
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-18T20:35:24Z/
url https://vuldb.com/?submit.753243
fixed_packages
0
url pkg:maven/net.mingsoft/ms-mcms@6.2.0
purl pkg:maven/net.mingsoft/ms-mcms@6.2.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@6.2.0
aliases CVE-2026-2666, GHSA-r9wp-qq53-qvjx
risk_score 2.6
exploitability 0.5
weighted_severity 5.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-py7n-se1p-zqde
Fixing_vulnerabilities
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/net.mingsoft/ms-mcms@6.0.1