Mingsoft MCMS vulnerabilities
10 published CVEs name Mingsoft MCMS among the affected products.
- 10Published CVEs10 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-19357
MingSoft MCMS ms-mdiy get information disclosure
MingSoft · MCMS
Medium6.9 - CVE-2026-19356
MingSoft MCMS ms-mdiy list information disclosure
MingSoft · MCMS
Medium6.9 - CVE-2026-19355
MingSoft MCMS ms-mdiy list.do ModelDataImpl.queryDiyFormData sql injection
MingSoft · MCMS
Medium6.9 - CVE-2026-4954
mingSoft MCMS Web Content List Endpoint ContentAction.java list sql injection
mingSoft · MCMS
Medium5.3 - CVE-2026-4953
mingSoft MCMS Editor Endpoint BaseAction.java catchImage server-side request forgery
mingSoft · MCMS
Medium6.9 - CVE-2026-2666
mingSoft MCMS Template Archive uploadTemplate.do unrestricted upload
mingSoft · MCMS
Medium5.1 - CVE-2023-3990
Mingsoft MCMS HTTP POST Request search.do cross site scripting
Mingsoft · MCMS
Low3.5 - CVE-2022-4640
Mingsoft MCMS Article save cross site scripting
Mingsoft · MCMS
Low3.5 - CVE-2022-4375
Mingsoft MCMS list sql injection
Mingsoft · MCMS
Medium6.3 - CVE-2022-4350
Mingsoft MCMS search.do cross site scripting
Mingsoft · MCMS
Low3.5