An issue in MCMS v.6.1.1 allows a remote attacker to obtain sensitive information via the source parameter.

Published Jul 17, 2026 · Updated Jul 20, 2026 · Assigned by mitre