All products

net.mingsoft:ms-mcms

Maven · Package
39 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
mingSoft MCMS File Upload vulnerabilityCVE-2024-22567 · GHSA-7QW4-9R68-2RMX net.mingsoft:ms-mcms Maven High No fix reported
mingSoft MCMS does not properly restrict file uploadsCVE-2026-2666 · GHSA-R9WP-QQ53-QVJX net.mingsoft:ms-mcms Maven Low No fix reported
MCMS reflected cross-site scripting (XSS) vulnerabilityCVE-2025-60837 · GHSA-WVV5-5G6X-HP7J net.mingsoft:ms-mcms Maven Medium No fix reported
MCMS vulnerable SQL injection via the content_title parameterCVE-2025-56316 · GHSA-54WC-49QJ-5GHJ net.mingsoft:ms-mcms Maven Critical Fix reported
MCMS allows arbitrary file uploads in the ueditor componentCVE-2025-29287 · GHSA-3922-2R6R-R4FV net.mingsoft:ms-mcms Maven Critical Fix reported
Ming-Soft MCMS vulnerable to SQL injectionCVE-2020-20913 · GHSA-HX8P-9M48-G76R net.mingsoft:ms-mcms Maven Critical Fix reported
Mingsoft MCMS vulnerable to Cross-site ScriptingCVE-2022-4350 · GHSA-P46C-M4J7-MJVQ net.mingsoft:ms-mcms Maven Medium No fix reported
SQL injection in net.mingsoft:ms-mcmsCVE-2022-26585 · GHSA-MX3X-RMRH-9WF6 net.mingsoft:ms-mcms Maven High No fix reported
Path traversal in MCMSCVE-2021-46037 · GHSA-73WX-RPJ3-MX46 net.mingsoft:ms-mcms Maven High No fix reported
File upload leading to RCE in MCMSCVE-2021-46036 · GHSA-G8J8-MGH9-Q77P net.mingsoft:ms-mcms Maven Critical No fix reported
Cross-site Scripting in Mingsoft MCMSCVE-2023-3990 · GHSA-RXVJ-5MV6-J5MC net.mingsoft:ms-mcms Maven Low Fix reported
Arbitrary File Upload in Mingsoft MCMSCVE-2022-22929 · GHSA-77HH-P7R6-66PV net.mingsoft:ms-mcms Maven Critical No fix reported
Mingsoft MCMS CSRF vulnerabilityCVE-2018-17366 · GHSA-M246-PV28-4R6F net.mingsoft:ms-mcms Maven High No fix reported
Mingsoft MCMS SQL injection vulnerabilityCVE-2021-46385 · GHSA-PHWQ-9GC4-Q5C8 net.mingsoft:ms-mcms Maven High No fix reported
Mingsoft MCMS SQL injection vulnerabilityCVE-2021-46383 · GHSA-QQC2-PV68-Q72H net.mingsoft:ms-mcms Maven High Fix reported
Code injection in mingSoft MCMSCVE-2023-51282 · GHSA-H57W-VH34-F8CW net.mingsoft:ms-mcms Maven High No fix reported
MCMS Arbitrary File Deletion vulnerabilityCVE-2021-46062 · GHSA-RPVR-MW7R-25XX net.mingsoft:ms-basicnet.mingsoft:ms-mcms Maven High Fix reported
RCE in Mingsoft MCMSCVE-2022-22930 · GHSA-8WQ7-HHJJ-FPQV net.mingsoft:ms-mcms Maven Critical Fix reported
MCMS vulnerable to arbitrary code execution via crafted thumbnailCVE-2020-22755 · GHSA-293V-5329-36WP net.mingsoft:ms-mcms Maven High No fix reported
Arbitrary file upload in Mingsoft MCMSCVE-2022-23315 · GHSA-FR5W-98MC-JJVG net.mingsoft:ms-mcms Maven Critical No fix reported