CVE-2025-60838

Medium CVSS: 6.5

An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code via uploading a crafted file.

Vendor

Product

CWE

Yayın Tarihi

2025-10-10 18:15:40

Güncelleme

2025-10-28 15:32:01

Source Identifier

cve@mitre.org

KEV Date Added

CWE-77 Mcms MEDIUM Mingsoft 2025

http://mcms.com https://gist.github.com/xuzhiwei66666666/8a990104861ce31cf73ea38e7eb32a7d https://gitee.com/mingSoft/MCMS

Medium

CVE-2026-2666

A flaw has been found in mingSoft MCMS 6.1.1. The affected element is an unknown function of the file /ms/file/uploadTem…

Medium

CVE-2025-60837

A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary Javascript in…

Critical

CVE-2025-56316

A SQL injection vulnerability in the content_title parameter of the /cms/content/list endpoint in MCMS 5.5.0 allows remo…

Critical

CVE-2025-29287

An arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary cod…