Skip to content
OpenAdvisories

Product · magicblack

MacCMS10

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-116216

    MacCMS v10 through 2026.1000.4056 Comment Impersonation via user_id Mass Assignment

    MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveData() that allows unauthenticated attackers to set arbitrary mac_comment columns including user_id. Attackers can submit anonymous comments with a crafted user_i…

    magicblack maccmspro MacCMS10 maccms10
  • Medium 4.7
    CVE-2026-90788

    magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection

    A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055. Affected by this vulnerability is an unknown functionality of the file /admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html of the component Template Handle…

    magicblack MacCMS10