Known Vulnerabilities for Mcms by Mcms Project
Listed below are 1 of the newest known vulnerabilities associated with "Mcms" by "Mcms Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-52203 json | An issue in MCMS v.6.1.1 allows a remote attacker to obtain sensitive information via the source parameter. | Not Provided | 2026-07-17 | 2026-07-20 |
| CVE-2025-60838 json | An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code via uploading a crafted file... | Not Provided | 2025-10-10 | 2026-07-05 |
| CVE-2025-60837 json | A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary Javascript in the c... | Not Provided | 2025-10-23 | 2026-07-05 |
| CVE-2025-29287 json | An arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary code via... | Not Provided | 2025-04-21 | 2026-07-05 |
| CVE-2018-17366 json | An issue was discovered in MCMS 4.6.5. There is a CSRF vulnerability that can add an administrator account via ms/basic/manag... | 8.8 - HIGH | 2018-09-23 | 2018-11-09 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mcms Project | Mcms | 5.0.0 | |||
| Application | Mcms Project | Mcms | 4.6.5 | |||
| Application | Mcms Project | Mcms | 4.6.4 | |||
| Application | Mcms Project | Mcms | 4.5.4 |