MRCMS v3.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/group/save.do.

Published Jul 18, 2025 · Updated Jul 5, 2026 · Assigned by mitre