What’s Vulnerable › Products

Mingsoft MCMS vulnerabilities

52 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your Mingsoft MCMS version is affected

Latest Mingsoft MCMS vulnerabilities

• CVE-2026-19357 — MingSoft MCMS ms-mdiy get information disclosure (CVSS 5.3)
• CVE-2026-19356 — MingSoft MCMS ms-mdiy list information disclosure (CVSS 5.3)
• CVE-2026-19355 — MingSoft MCMS ms-mdiy list.do ModelDataImpl.queryDiyFormData sql injection (CVSS 7.3)
• CVE-2026-4954 — mingSoft MCMS Web Content List Endpoint ContentAction.java list sql injection (CVSS 6.3)
• CVE-2026-4953 — mingSoft MCMS Editor Endpoint BaseAction.java catchImage server-side request forgery (CVSS 7.3)
• CVE-2026-2666 — mingSoft MCMS Template Archive uploadTemplate.do unrestricted upload (CVSS 7.2)
• CVE-2025-60837 — (CVSS 6.1)
• CVE-2025-56316 — (CVSS 9.8)
• CVE-2025-60838 — (CVSS 6.5)
• CVE-2025-29287 — (CVSS 9.8)
• CVE-2024-42991 — (CVSS 8.1)
• CVE-2024-22567 — (CVSS 8.8)
• CVE-2023-51282 — (CVSS 7.5)
• CVE-2023-50578 — (CVSS 9.8)
• CVE-2023-3990 — Mingsoft MCMS HTTP POST Request search.do cross site scripting (CVSS 6.1)
• CVE-2020-22755 — (CVSS 8.8)
• CVE-2020-20913 — (CVSS 9.8)
• CVE-2022-47042 — (CVSS 8.8)
• CVE-2022-4640 — Mingsoft MCMS Article save cross site scripting (CVSS 5.4)
• CVE-2022-4375 — Mingsoft MCMS list sql injection (CVSS 9.8)
• CVE-2022-4350 — Mingsoft MCMS search.do cross site scripting (CVSS 6.1)
• CVE-2022-36599 — (CVSS 9.8)
• CVE-2022-36272 — (CVSS 9.8)
• CVE-2022-31943 — (CVSS 9.8)
• CVE-2022-30506 — (CVSS 9.8)