Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS02cnZ2LWg4ZzctNzI4d84AAwgN
Mingsoft MCMS Cross-site Scripting vulnerability
A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Article Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216499.
Permalink: https://github.com/advisories/GHSA-6rvv-h8g7-728wJSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02cnZ2LWg4ZzctNzI4d84AAwgN
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: over 1 year ago
Updated: about 1 year ago
CVSS Score: 5.4
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Identifiers: GHSA-6rvv-h8g7-728w, CVE-2022-4640
References:
- https://nvd.nist.gov/vuln/detail/CVE-2022-4640
- https://gitee.com/mingSoft/MCMS/issues/I65KI5
- https://vuldb.com/?id.216499
- https://github.com/advisories/GHSA-6rvv-h8g7-728w
Affected Packages
maven:net.mingsoft:ms-mcms
Dependent packages: 3Dependent repositories: 2
Downloads:
Affected Version Ranges: <= 5.2.9
No known fixed version
All affected versions: 4.6.5, 4.7.1, 4.7.2, 5.0.0, 5.0.1, 5.2.1, 5.2.2, 5.2.3, 5.2.4, 5.2.5, 5.2.6, 5.2.7, 5.2.8, 5.2.9