Description
MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability in the PageAction.verify endpoint (GET /ms/mdiy/page/verify.do).
Critical · 9.8
CVE-2026-88414
EUVD-2026-84810GHSA-wmj7-4gpr-g8f5
MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability in the PageAction.verify endpoint (GET /ms/mdiy/page/verify.do).
Published Sep 22, 2026 · Updated Sep 25, 2026 · Assigned by mitre