Search for packages
| purl | pkg:maven/net.mingsoft/ms-mcms@5.2.8 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-wvv5-5g6x-hp7j
Aliases: CVE-2025-60837 |
MCMS reflected cross-site scripting (XSS) vulnerability A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary … | There are no reported fixed by versions. |
|
GHSA-3922-2r6r-r4fv
Aliases: CVE-2025-29287 |
MCMS allows arbitrary file uploads in the ueditor component An arbitrary file upload vulnerability in the ueditor component of MCMS … |
Vulnerable |
|
GHSA-hc5g-xf64-j49j
Aliases: CVE-2022-4375 |
Mingsoft MCMS vulnerable to SQL Injection A vulnerability was found in Mingsoft MCMS up to 5.2.9. It has been classified … |
Vulnerable |
|
GHSA-6rvv-h8g7-728w
Aliases: CVE-2022-4640 |
Mingsoft MCMS Cross-site Scripting vulnerability A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by … | There are no reported fixed by versions. |
|
GHSA-p46c-m4j7-mjvq
Aliases: CVE-2022-4350 |
Mingsoft MCMS vulnerable to Cross-site Scripting A vulnerability, which was classified as problematic, was found in Mingsoft MCMS 5.2.8. Affected … | There are no reported fixed by versions. |
|
GHSA-rpvr-mw7r-25xx
Aliases: CVE-2021-46062 |
MCMS Arbitrary File Deletion vulnerability `net.mingsoft:ms-basic` is used for plugin management for applications built with Maven for the [Mingfei Content … |
Vulnerable |
|
GHSA-4828-473v-37gh
Aliases: CVE-2022-31943 |
Unrestricted Upload of File with Dangerous Type in MCMS MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability. | There are no reported fixed by versions. |
|
GHSA-hmj3-mqgw-2fq6
Aliases: CVE-2022-36272 |
Mingsoft MCMS SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter Mingsoft MCMS 5.2.8 was discovered to contain a SQL … | There are no reported fixed by versions. |
|
GHSA-w3rc-2whg-w934
Aliases: CVE-2022-36599 |
Mingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List Mingsoft MCMS 5.2.8 was discovered to contain a SQL … | There are no reported fixed by versions. |
|
GHSA-8wq7-hhjj-fpqv
Aliases: CVE-2022-22930 |
RCE in Mingsoft MCMS A remote code execution (RCE) vulnerability in the Template Management function of MCMS allows attackers to … |
Vulnerable |
|
GHSA-7qw4-9r68-2rmx
Aliases: CVE-2024-22567 |
mingSoft MCMS File Upload vulnerability File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST … | There are no reported fixed by versions. |
|
GHSA-3vvh-8c65-32j4
Aliases: CVE-2023-50578 |
Mingsoft MCMS SQL injection Mingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at … | There are no reported fixed by versions. |
|
GHSA-65v6-3c9m-hmrp
Aliases: CVE-2022-47042 |
Arbitrary file write in net.mingsoft:ms-mcms MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the … |
Vulnerable |
|
GHSA-r9wp-qq53-qvjx
Aliases: CVE-2026-2666 |
mingSoft MCMS does not properly restrict file uploads A flaw has been found in mingSoft MCMS 6.1.1. The affected element … | There are no reported fixed by versions. |
|
GHSA-rxvj-5mv6-j5mc
Aliases: CVE-2023-3990 |
Cross-site Scripting in Mingsoft MCMS A Cross-site Scripting vulnerability has been found in Mingsoft MCMS up to 5.3.1. This affects … |
Vulnerable Vulnerable |