Loading HuntDB...

GHSA-6rvv-h8g7-728w

GitHub Security Advisory

Mingsoft MCMS Cross-site Scripting vulnerability

✓ GitHub Reviewed MODERATE Has CVE

Advisory Details

A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Article Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216499.

Affected Packages

Maven net.mingsoft:ms-mcms
Affected versions: 0 (last affected: 5.2.9)

Related CVEs

Key Information

GHSA ID
GHSA-6rvv-h8g7-728w
Published
December 22, 2022 12:30 AM
Last Modified
December 29, 2022 11:36 PM
CVSS Score
5.0 /10
Primary Ecosystem
Maven
Primary Package
net.mingsoft:ms-mcms
GitHub Reviewed
✓ Yes

Dataset

Last updated: August 1, 2025 6:44 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.