CVE-2025-60838

Description

References

• gist.github.com/xuzhiwei66666666/8a990104861ce31cf73ea38e7eb32a7d · Third Party Advisory
• gitee.com/mingSoft/MCMS · Product

Más vulnerabilidades de mcms

• CVE-2026-2666ALTO 7.2A flaw has been found in mingSoft MCMS 6.1.1. The affected element is an unknown function of the file /ms/file/uploadTemplate.do of the comp…
• CVE-2025-60837MEDIO 6.1A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary Javascript in the context of a use…
• CVE-2025-56316CRÍTICO 9.8A SQL injection vulnerability in the content_title parameter of the /cms/content/list endpoint in MCMS 5.5.0 allows remote attackers to exec…
• CVE-2025-29287CRÍTICO 9.8An arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary code via uploading a cr…
• CVE-2024-42991ALTO 8.1MCMS v5.4.1 has front-end file upload vulnerability which can lead to remote command execution.