In short
- CVE-2022-4640 is a MEDIUM (CVSS 5.4) vulnerability affecting net.mingsoft:ms-mcms, mcms (mingsoft).
- Chance of exploitation in the next 30 days (EPSS): 0.43%, higher than 37.8% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Article Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216499.
NVD description
A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Article Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216499.
More vulnerabilities in net.mingsoft:ms-mcms
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free