CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2023-3990 – Mingsoft MCMS HTTP POST Request search.do cross site scripting
https://notcve.org/view.php?id=CVE-2023-3990
28 Jul 2023 — A vulnerability classified as problematic has been found in Mingsoft MCMS up to 5.3.1. This affects an unknown part of the file search.do of the component HTTP POST Request Handler. The manipulation of the argument style leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://gitee.com/mingSoft/MCMS/issues/I7K4DQ • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.0EPSS: 0%CPEs: 3EXPL: 1CVE-2022-47042
https://notcve.org/view.php?id=CVE-2022-47042
24 Jan 2023 — MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do. Se descubrió que MCMS v5.2.10 y versiones anteriores contenían una vulnerabilidad de escritura de archivos arbitraria a través del componente ms/template/writeFileContent.do. • https://gitee.com/mingSoft/MCMS/issues/I6592F • CWE-434: Unrestricted Upload of File with Dangerous Type •