Search for packages
| purl | pkg:maven/net.mingsoft/ms-mcms@5.2.11 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-wvv5-5g6x-hp7j
Aliases: CVE-2025-60837 |
MCMS reflected cross-site scripting (XSS) vulnerability A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary … | There are no reported fixed by versions. |
|
GHSA-3922-2r6r-r4fv
Aliases: CVE-2025-29287 |
MCMS allows arbitrary file uploads in the ueditor component An arbitrary file upload vulnerability in the ueditor component of MCMS … |
Vulnerable |
|
GHSA-7qw4-9r68-2rmx
Aliases: CVE-2024-22567 |
mingSoft MCMS File Upload vulnerability File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST … | There are no reported fixed by versions. |
|
GHSA-r9wp-qq53-qvjx
Aliases: CVE-2026-2666 |
mingSoft MCMS does not properly restrict file uploads A flaw has been found in mingSoft MCMS 6.1.1. The affected element … | There are no reported fixed by versions. |
|
GHSA-rxvj-5mv6-j5mc
Aliases: CVE-2023-3990 |
Cross-site Scripting in Mingsoft MCMS A Cross-site Scripting vulnerability has been found in Mingsoft MCMS up to 5.3.1. This affects … |
Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-rpvr-mw7r-25xx
|
MCMS Arbitrary File Deletion vulnerability `net.mingsoft:ms-basic` is used for plugin management for applications built with Maven for the [Mingfei Content … |
CVE-2021-46062
|
|
GHSA-65v6-3c9m-hmrp
|
Arbitrary file write in net.mingsoft:ms-mcms MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the … |
CVE-2022-47042
|