Skip to content
OpenAdvisories

Package · Maven

net.mingsoft:ms-mcms

39 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-2666

    mingSoft MCMS Template Archive uploadTemplate.do unrestricted upload

    A flaw has been found in mingSoft MCMS 6.1.1. The affected element is an unknown function of the file /ms/file/uploadTemplate.do of the component Template Archive Handler. Executing a manipulation of the argument File can lead to unrestricted upload. The atta…

    MingSoft MCMS net.mingsoft:ms-mcms Maven
  • Medium 6.1
    CVE-2025-60837

    MCMS reflected cross-site scripting (XSS) vulnerability

    A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload.

    net.mingsoft:ms-mcms Maven
  • Medium 6.3
    CVE-2022-4375 Scanner template

    Mingsoft MCMS list sql injection

    A vulnerability was found in Mingsoft MCMS up to 5.2.9. It has been classified as critical. Affected is an unknown function of the file /cms/category/list. The manipulation of the argument sqlWhere leads to sql injection. It is possible to launch the attack r…

    MingSoft MCMS net.mingsoft:ms-mcms Maven