Skip to content
OpenAdvisories

Product · magicblack

MacCMS10

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-71232

    MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCE

    MacCMS10's admin template editor (application/admin/controller/Template.php) blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, show_source, create_function, register_shutdown_function, r…

    magicblack MacCMS10