Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/net.mingsoft/ms-mcms@5.5.0
purl pkg:maven/net.mingsoft/ms-mcms@5.5.0
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 4.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-54wc-49qj-5ghj
Aliases:
CVE-2025-56316
MCMS vulnerable SQL injection via the content_title parameter A SQL injection vulnerability in the content_title parameter of the /cms/content/list endpoint …
6.0.2
Vulnerable
GHSA-wvv5-5g6x-hp7j
Aliases:
CVE-2025-60837
MCMS reflected cross-site scripting (XSS) vulnerability A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary … There are no reported fixed by versions.
GHSA-r9wp-qq53-qvjx
Aliases:
CVE-2026-2666
mingSoft MCMS does not properly restrict file uploads A flaw has been found in mingSoft MCMS 6.1.1. The affected element … There are no reported fixed by versions.
This package is not known to fix any advisories.