An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code via uploading a crafted file.

Published Oct 10, 2025 · Updated Jul 5, 2026 · Assigned by mitre