MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in the custom model/form import feature.

Published Sep 22, 2026 · Updated Oct 6, 2026 · Assigned by mitre