Search for packages
| purl | pkg:maven/net.mingsoft/ms-mcms@5.4.0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-wvv5-5g6x-hp7j
Aliases: CVE-2025-60837 |
MCMS reflected cross-site scripting (XSS) vulnerability A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary … | There are no reported fixed by versions. |
|
GHSA-3922-2r6r-r4fv
Aliases: CVE-2025-29287 |
MCMS allows arbitrary file uploads in the ueditor component An arbitrary file upload vulnerability in the ueditor component of MCMS … |
Vulnerable |
|
GHSA-r9wp-qq53-qvjx
Aliases: CVE-2026-2666 |
mingSoft MCMS does not properly restrict file uploads A flaw has been found in mingSoft MCMS 6.1.1. The affected element … | There are no reported fixed by versions. |