Mingsoft MCMS vulnerabilities

CVEs per yearBy the year they were published

1. 20223
2. 20231
3. 20266

Newest CVEs

• CVE-2026-19357

  MingSoft MCMS ms-mdiy get information disclosure

  MingSoft · MCMS

  Medium6.9
• CVE-2026-19356

  MingSoft MCMS ms-mdiy list information disclosure

  MingSoft · MCMS

  Medium6.9
• CVE-2026-19355

  MingSoft MCMS ms-mdiy list.do ModelDataImpl.queryDiyFormData sql injection

  MingSoft · MCMS

  Medium6.9
• CVE-2026-4954

  mingSoft MCMS Web Content List Endpoint ContentAction.java list sql injection

  mingSoft · MCMS

  Medium5.3
• CVE-2026-4953

  mingSoft MCMS Editor Endpoint BaseAction.java catchImage server-side request forgery

  mingSoft · MCMS

  Medium6.9
• CVE-2026-2666

  mingSoft MCMS Template Archive uploadTemplate.do unrestricted upload

  mingSoft · MCMS

  Medium5.1
• CVE-2023-3990

  Mingsoft MCMS HTTP POST Request search.do cross site scripting

  Mingsoft · MCMS

  Low3.5
• CVE-2022-4640

  Mingsoft MCMS Article save cross site scripting

  Mingsoft · MCMS

  Low3.5
• CVE-2022-4375

  Mingsoft MCMS list sql injection

  Mingsoft · MCMS

  Medium6.3
• CVE-2022-4350

  Mingsoft MCMS search.do cross site scripting

  Mingsoft · MCMS

  Low3.5