CVE-2022-4350: Mingsoft MCMS search.do cross site scripting

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-12-08 · updated 2026-06-17
Weakness: CWE-707

Description

A vulnerability, which was classified as problematic, was found in Mingsoft MCMS 5.2.8. Affected is an unknown function of the file search.do. The manipulation of the argument content_title leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-215112.

Affected products

Mingsoft MCMS: 5.2.8

References

https://gitee.com/mingSoft/MCMS/issues/I5MT8Y
https://vuldb.com/?id.215112
https://gitee.com/mingSoft/MCMS/issues/I5MT8Y
https://vuldb.com/?id.215112

Get alerted when CVE-2022-4350 or the next vulnerability affects your stack