RCE in Mingsoft MCMS

CRITICAL 9.8CVE-2022-22930 · GHSA-8wq7-hhjj-fpqv · Published 21/01/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
net.mingsoft:ms-mcms Maven	`< 5.2.9`	`5.2.9`
mcms mingsoft	`= 5.2.4`	No fix yet

Description

A remote code execution (RCE) vulnerability in the Template Management function of MCMS allows attackers to execute arbitrary code via a crafted payload.

NVD description

A remote code execution (RCE) vulnerability in the Template Management function of MCMS v5.2.4 allows attackers to execute arbitrary code via a crafted payload.

References

nvd.nist.gov/vuln/detail/CVE-2022-22930 · ADVISORY
ming-soft/MCMS · WEB
web.archive.org/web/20220201022121/https://gitee.com/mingSoft/MCMS/issues/I4Q4M6 · WEB
gitee.com/mingSoft/MCMS/issues/I4Q4M6 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free