Vendor
maccmspro
3 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Low 3.1
MacCMS v10 through 2026.1000.4056 Race Condition via Card Redemption
MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData() that allows authenticated members to redeem one recharge card multiple times via the user/buy endpoint. Attackers can send many concurrent flag=card requests that pas…