Low
CVE-2026-2666
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 39
Reset filters
Medium
CVE-2025-60837
MCMS reflected cross-site scripting (XSS) vulnerability
Critical
CVE-2025-56316
MCMS vulnerable SQL injection via the content_title parameter
Critical
CVE-2025-29287
MCMS allows arbitrary file uploads in the ueditor component
High
CVE-2024-22567
mingSoft MCMS File Upload vulnerability
High
CVE-2023-51282
Code injection in mingSoft MCMS
High
CVE-2023-50578
Mingsoft MCMS SQL injection
Low
CVE-2023-3990
Cross-site Scripting in Mingsoft MCMS
High
CVE-2020-22755
MCMS vulnerable to arbitrary code execution via crafted thumbnail
Critical
CVE-2020-20913
Ming-Soft MCMS vulnerable to SQL injection
High
CVE-2022-47042
Arbitrary file write in net.mingsoft:ms-mcms
Medium
CVE-2022-4640
Mingsoft MCMS Cross-site Scripting vulnerability
Critical
CVE-2022-4375
Mingsoft MCMS vulnerable to SQL Injection
Medium
CVE-2022-4350
Mingsoft MCMS vulnerable to Cross-site Scripting
Critical
CVE-2022-36599
Mingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List
Critical
CVE-2022-36272
Mingsoft MCMS SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter
Critical
CVE-2022-31943
Unrestricted Upload of File with Dangerous Type in MCMS
Critical
CVE-2022-30506
Code injection in MCMS
High
CVE-2022-29647
Cross Site Request Forgery in Mingsoft MCMS
High
CVE-2018-17366
Mingsoft MCMS CSRF vulnerability
High
CVE-2022-27340
Cross Site Request Forgery in Mingsoft MCMS
High
CVE-2022-26585
SQL injection in net.mingsoft:ms-mcms
Critical
CVE-2021-46384
Remote code execution in net.mingsoft:ms-mcms
Critical
CVE-2022-23899
SQL injection in net.mingsoft:ms-mcms
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.