{"schema_version":1,"title":"net.mingsoft:ms-mcms (Maven) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 39 vulnerabilities in net.mingsoft:ms-mcms (Maven): 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-2666, was published on 18 February 2026.","url":"https://junglewise.ai/threats/technologies/net-mingsoft-ms-mcms","json_url":"https://junglewise.ai/threats/technologies/net-mingsoft-ms-mcms.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/net-mingsoft-ms-mcms","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":0,"all_time":39,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":3},"latest":[{"cve":"CVE-2026-2666","cvss":3.1,"epss":0.0055,"slug":"cve-2026-2666-mingsoft-mcms-does-not-properly-restrict-file-uploads","title":"mingSoft MCMS does not properly restrict file uploads","severity":"low","exploited":false,"published_at":"2026-02-18T21:31:23+00:00","url":"https://junglewise.ai/threats/cve-2026-2666-mingsoft-mcms-does-not-properly-restrict-file-uploads"},{"cve":"CVE-2025-60837","cvss":6.1,"epss":0.002,"slug":"cve-2025-60837-mingsoft-mcms-reflected-xss-in-search-do","title":"mingSoft MCMS reflected XSS in search.do","severity":"medium","exploited":false,"published_at":"2025-10-23T19:15:50.743+00:00","url":"https://junglewise.ai/threats/cve-2025-60837-mingsoft-mcms-reflected-xss-in-search-do"},{"cve":"CVE-2025-56316","cvss":3.1,"epss":0.0064,"slug":"cve-2025-56316-mcms-vulnerable-sql-injection-via-the-content-title-parameter","title":"MCMS vulnerable SQL injection via the content_title parameter","severity":"low","exploited":false,"published_at":"2025-10-17T21:31:18+00:00","url":"https://junglewise.ai/threats/cve-2025-56316-mcms-vulnerable-sql-injection-via-the-content-title-parameter"},{"cve":"CVE-2025-29287","cvss":3.1,"epss":0.0078,"slug":"cve-2025-29287-mcms-allows-arbitrary-file-uploads-in-the-ueditor-component","title":"MCMS allows arbitrary file uploads in the ueditor component","severity":"low","exploited":false,"published_at":"2025-04-21T15:31:25+00:00","url":"https://junglewise.ai/threats/cve-2025-29287-mcms-allows-arbitrary-file-uploads-in-the-ueditor-component"},{"cve":"CVE-2024-22567","cvss":3.1,"epss":0.1779,"slug":"cve-2024-22567-mingsoft-mcms-file-upload-vulnerability","title":"mingSoft MCMS File Upload vulnerability","severity":"low","exploited":false,"published_at":"2024-02-05T21:30:31+00:00","url":"https://junglewise.ai/threats/cve-2024-22567-mingsoft-mcms-file-upload-vulnerability"},{"cve":"CVE-2023-51282","cvss":3.1,"epss":0.0112,"slug":"cve-2023-51282-code-injection-in-mingsoft-mcms","title":"Code injection in mingSoft MCMS","severity":"low","exploited":false,"published_at":"2024-01-16T03:30:20+00:00","url":"https://junglewise.ai/threats/cve-2023-51282-code-injection-in-mingsoft-mcms"},{"cve":"CVE-2023-50578","cvss":3.1,"epss":0.0224,"slug":"cve-2023-50578-mingsoft-mcms-sql-injection","title":"Mingsoft MCMS SQL injection","severity":"low","exploited":false,"published_at":"2023-12-30T18:30:35+00:00","url":"https://junglewise.ai/threats/cve-2023-50578-mingsoft-mcms-sql-injection"},{"cve":"CVE-2023-3990","cvss":3,"epss":0.0143,"slug":"cve-2023-3990-cross-site-scripting-in-mingsoft-mcms","title":"Cross-site Scripting in Mingsoft MCMS","severity":"low","exploited":false,"published_at":"2023-07-28T09:30:29+00:00","url":"https://junglewise.ai/threats/cve-2023-3990-cross-site-scripting-in-mingsoft-mcms"},{"cve":"CVE-2020-22755","cvss":3.1,"epss":0.0092,"slug":"cve-2020-22755-mcms-vulnerable-to-arbitrary-code-execution-via-crafted-thumbnail","title":"MCMS vulnerable to arbitrary code execution via crafted thumbnail","severity":"low","exploited":false,"published_at":"2023-05-08T15:30:18+00:00","url":"https://junglewise.ai/threats/cve-2020-22755-mcms-vulnerable-to-arbitrary-code-execution-via-crafted-thumbnail"},{"cve":"CVE-2020-20913","cvss":3.1,"epss":0.0142,"slug":"cve-2020-20913-ming-soft-mcms-vulnerable-to-sql-injection","title":"Ming-Soft MCMS vulnerable to SQL injection","severity":"low","exploited":false,"published_at":"2023-04-04T15:30:27+00:00","url":"https://junglewise.ai/threats/cve-2020-20913-ming-soft-mcms-vulnerable-to-sql-injection"},{"cve":"CVE-2022-47042","cvss":3.1,"epss":0.0103,"slug":"cve-2022-47042-arbitrary-file-write-in-net-mingsoft-ms-mcms","title":"Arbitrary file write in net.mingsoft:ms-mcms","severity":"low","exploited":false,"published_at":"2023-01-26T21:30:20+00:00","url":"https://junglewise.ai/threats/cve-2022-47042-arbitrary-file-write-in-net-mingsoft-ms-mcms"},{"cve":"CVE-2022-4640","cvss":3.1,"epss":0.0041,"slug":"cve-2022-4640-mingsoft-mcms-cross-site-scripting-vulnerability","title":"Mingsoft MCMS Cross-site Scripting vulnerability","severity":"low","exploited":false,"published_at":"2022-12-22T00:30:36+00:00","url":"https://junglewise.ai/threats/cve-2022-4640-mingsoft-mcms-cross-site-scripting-vulnerability"},{"cve":"CVE-2022-4375","cvss":3.1,"epss":0.0297,"slug":"cve-2022-4375-mingsoft-mcms-vulnerable-to-sql-injection","title":"Mingsoft MCMS vulnerable to SQL Injection","severity":"low","exploited":false,"published_at":"2022-12-09T09:30:30+00:00","url":"https://junglewise.ai/threats/cve-2022-4375-mingsoft-mcms-vulnerable-to-sql-injection"},{"cve":"CVE-2022-4350","epss":0.0041,"slug":"cve-2022-4350-mingsoft-mcms-vulnerable-to-cross-site-scripting","title":"Mingsoft MCMS vulnerable to Cross-site Scripting","severity":"info","exploited":false,"published_at":"2022-12-08T12:30:26+00:00","url":"https://junglewise.ai/threats/cve-2022-4350-mingsoft-mcms-vulnerable-to-cross-site-scripting"},{"cve":"CVE-2022-36272","cvss":3.1,"epss":0.0109,"slug":"cve-2022-36272-mingsoft-mcms-sql-injection-vulnerability-in-mdiy-page-verify-uri","title":"Mingsoft MCMS SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter","severity":"low","exploited":false,"published_at":"2022-08-17T00:00:30+00:00","url":"https://junglewise.ai/threats/cve-2022-36272-mingsoft-mcms-sql-injection-vulnerability-in-mdiy-page-verify-uri"},{"cve":"CVE-2022-36599","cvss":3.1,"epss":0.0109,"slug":"cve-2022-36599-mingsoft-mcms-sql-injection-vulnerability-in-mdiy-model-delete","title":"Mingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List","severity":"low","exploited":false,"published_at":"2022-08-17T00:00:30+00:00","url":"https://junglewise.ai/threats/cve-2022-36599-mingsoft-mcms-sql-injection-vulnerability-in-mdiy-model-delete"},{"cve":"CVE-2022-31943","cvss":3.1,"epss":0.0152,"slug":"cve-2022-31943-unrestricted-upload-of-file-with-dangerous-type-in-mcms","title":"Unrestricted Upload of File with Dangerous Type in MCMS","severity":"low","exploited":false,"published_at":"2022-07-02T00:00:19+00:00","url":"https://junglewise.ai/threats/cve-2022-31943-unrestricted-upload-of-file-with-dangerous-type-in-mcms"},{"cve":"CVE-2022-30506","cvss":3.1,"epss":0.0256,"slug":"cve-2022-30506-code-injection-in-mcms","title":"Code injection in MCMS","severity":"low","exploited":false,"published_at":"2022-06-03T00:01:08+00:00","url":"https://junglewise.ai/threats/cve-2022-30506-code-injection-in-mcms"},{"cve":"CVE-2022-29647","cvss":3.1,"epss":0.0065,"slug":"cve-2022-29647-cross-site-request-forgery-in-mingsoft-mcms","title":"Cross Site Request Forgery in Mingsoft MCMS","severity":"low","exploited":false,"published_at":"2022-06-03T00:01:05+00:00","url":"https://junglewise.ai/threats/cve-2022-29647-cross-site-request-forgery-in-mingsoft-mcms"},{"cve":"CVE-2018-17366","cvss":3,"epss":0.0057,"slug":"cve-2018-17366-mingsoft-mcms-csrf-vulnerability","title":"Mingsoft MCMS CSRF vulnerability","severity":"low","exploited":false,"published_at":"2022-05-14T02:00:08+00:00","url":"https://junglewise.ai/threats/cve-2018-17366-mingsoft-mcms-csrf-vulnerability"},{"cve":"CVE-2022-27340","cvss":3.1,"epss":0.0067,"slug":"cve-2022-27340-cross-site-request-forgery-in-mingsoft-mcms","title":"Cross Site Request Forgery in Mingsoft MCMS","severity":"low","exploited":false,"published_at":"2022-04-23T00:03:01+00:00","url":"https://junglewise.ai/threats/cve-2022-27340-cross-site-request-forgery-in-mingsoft-mcms"},{"cve":"CVE-2022-26585","epss":0.0548,"slug":"cve-2022-26585-sql-injection-in-net-mingsoft-ms-mcms","title":"SQL injection in net.mingsoft:ms-mcms","severity":"info","exploited":false,"published_at":"2022-04-06T00:01:35+00:00","url":"https://junglewise.ai/threats/cve-2022-26585-sql-injection-in-net-mingsoft-ms-mcms"},{"cve":"CVE-2021-46384","cvss":3.1,"epss":0.0222,"slug":"cve-2021-46384-remote-code-execution-in-net-mingsoft-ms-mcms","title":"Remote code execution in net.mingsoft:ms-mcms","severity":"low","exploited":false,"published_at":"2022-03-05T00:00:41+00:00","url":"https://junglewise.ai/threats/cve-2021-46384-remote-code-execution-in-net-mingsoft-ms-mcms"},{"cve":"CVE-2022-23899","cvss":3.1,"epss":0.0108,"slug":"cve-2022-23899-sql-injection-in-net-mingsoft-ms-mcms","title":"SQL injection in net.mingsoft:ms-mcms","severity":"low","exploited":false,"published_at":"2022-03-04T00:00:17+00:00","url":"https://junglewise.ai/threats/cve-2022-23899-sql-injection-in-net-mingsoft-ms-mcms"},{"cve":"CVE-2022-23898","cvss":3.1,"epss":0.0773,"slug":"cve-2022-23898-sql-injection-in-net-mingsoft-ms-mcms","title":"SQL injection in net.mingsoft:ms-mcms","severity":"low","exploited":false,"published_at":"2022-03-04T00:00:17+00:00","url":"https://junglewise.ai/threats/cve-2022-23898-sql-injection-in-net-mingsoft-ms-mcms"}],"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"com.liferay.portal:release.portal.bom (Maven)","slug":"com-liferay-portal-release-portal-bom","vulnerabilities":92,"url":"https://junglewise.ai/threats/technologies/com-liferay-portal-release-portal-bom"},{"name":"org.keycloak:keycloak-services (Maven)","slug":"org-keycloak-keycloak-services","vulnerabilities":76,"url":"https://junglewise.ai/threats/technologies/org-keycloak-keycloak-services"},{"name":"org.keycloak:keycloak-core (Maven)","slug":"org-keycloak-keycloak-core","vulnerabilities":56,"url":"https://junglewise.ai/threats/technologies/org-keycloak-keycloak-core"},{"name":"org.apache.struts:struts2-core (Maven)","slug":"org-apache-struts-struts2-core","vulnerabilities":40,"url":"https://junglewise.ai/threats/technologies/org-apache-struts-struts2-core"},{"name":"com.thoughtworks.xstream:xstream (Maven)","slug":"com-thoughtworks-xstream-xstream","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/com-thoughtworks-xstream-xstream"},{"name":"com.jfinal:jfinal (Maven)","slug":"com-jfinal-jfinal","vulnerabilities":36,"url":"https://junglewise.ai/threats/technologies/com-jfinal-jfinal"},{"name":"org.jenkins-ci.plugins:script-security (Maven)","slug":"org-jenkins-ci-plugins-script-security","vulnerabilities":36,"url":"https://junglewise.ai/threats/technologies/org-jenkins-ci-plugins-script-security"},{"name":"org.apache.tomcat:tomcat (Maven)","slug":"org-apache-tomcat-tomcat","vulnerabilities":35,"url":"https://junglewise.ai/threats/technologies/org-apache-tomcat-tomcat"},{"name":"com.liferay.portal:release.dxp.bom (Maven)","slug":"com-liferay-portal-release-dxp-bom","vulnerabilities":34,"url":"https://junglewise.ai/threats/technologies/com-liferay-portal-release-dxp-bom"},{"name":"org.opencms:opencms-core (Maven)","slug":"org-opencms-opencms-core","vulnerabilities":31,"url":"https://junglewise.ai/threats/technologies/org-opencms-opencms-core"},{"name":"org.keycloak:keycloak-parent (Maven)","slug":"org-keycloak-keycloak-parent","vulnerabilities":26,"url":"https://junglewise.ai/threats/technologies/org-keycloak-keycloak-parent"},{"name":"com.fasterxml.jackson.core:jackson-databind (Maven)","slug":"com-fasterxml-jackson-core-jackson-databind","vulnerabilities":25,"url":"https://junglewise.ai/threats/technologies/com-fasterxml-jackson-core-jackson-databind"}],"technology":{"hub":true,"name":"net.mingsoft:ms-mcms (Maven)","slug":"net-mingsoft-ms-mcms","vendor":{"name":"Maven","slug":"maven","url":"https://junglewise.ai/threats/vendors/maven"},"aliases":[],"url":"https://junglewise.ai/threats/technologies/net-mingsoft-ms-mcms"},"most_severe":[{"cve":"CVE-2025-60837","cvss":6.1,"epss":0.002,"slug":"cve-2025-60837-mingsoft-mcms-reflected-xss-in-search-do","title":"mingSoft MCMS reflected XSS in search.do","severity":"medium","exploited":false,"published_at":"2025-10-23T19:15:50.743+00:00","url":"https://junglewise.ai/threats/cve-2025-60837-mingsoft-mcms-reflected-xss-in-search-do"},{"cve":"CVE-2022-22930","cvss":3.1,"epss":0.2369,"slug":"cve-2022-22930-rce-in-mingsoft-mcms","title":"RCE in Mingsoft MCMS","severity":"low","exploited":false,"published_at":"2022-01-22T00:00:50+00:00","url":"https://junglewise.ai/threats/cve-2022-22930-rce-in-mingsoft-mcms"},{"cve":"CVE-2024-22567","cvss":3.1,"epss":0.1779,"slug":"cve-2024-22567-mingsoft-mcms-file-upload-vulnerability","title":"mingSoft MCMS File Upload vulnerability","severity":"low","exploited":false,"published_at":"2024-02-05T21:30:31+00:00","url":"https://junglewise.ai/threats/cve-2024-22567-mingsoft-mcms-file-upload-vulnerability"},{"cve":"CVE-2022-23898","cvss":3.1,"epss":0.0773,"slug":"cve-2022-23898-sql-injection-in-net-mingsoft-ms-mcms","title":"SQL injection in net.mingsoft:ms-mcms","severity":"low","exploited":false,"published_at":"2022-03-04T00:00:17+00:00","url":"https://junglewise.ai/threats/cve-2022-23898-sql-injection-in-net-mingsoft-ms-mcms"},{"cve":"CVE-2021-46036","cvss":3.1,"epss":0.0374,"slug":"cve-2021-46036-file-upload-leading-to-rce-in-mcms","title":"File upload leading to RCE in MCMS","severity":"low","exploited":false,"published_at":"2022-02-19T00:01:25+00:00","url":"https://junglewise.ai/threats/cve-2021-46036-file-upload-leading-to-rce-in-mcms"},{"cve":"CVE-2021-46386","cvss":3.1,"epss":0.0311,"slug":"cve-2021-46386-mingsoft-mcms-vulnerable-to-remote-code-execution-via-file-upload","title":"Mingsoft MCMS vulnerable to Remote Code Execution via file upload.","severity":"low","exploited":false,"published_at":"2022-01-27T00:01:00+00:00","url":"https://junglewise.ai/threats/cve-2021-46386-mingsoft-mcms-vulnerable-to-remote-code-execution-via-file-upload"},{"cve":"CVE-2022-4375","cvss":3.1,"epss":0.0297,"slug":"cve-2022-4375-mingsoft-mcms-vulnerable-to-sql-injection","title":"Mingsoft MCMS vulnerable to SQL Injection","severity":"low","exploited":false,"published_at":"2022-12-09T09:30:30+00:00","url":"https://junglewise.ai/threats/cve-2022-4375-mingsoft-mcms-vulnerable-to-sql-injection"},{"cve":"CVE-2021-46063","cvss":3.1,"epss":0.0273,"slug":"cve-2021-46063-server-side-template-injection-in-mcms","title":"Server Side Template Injection in MCMS","severity":"low","exploited":false,"published_at":"2022-02-19T00:01:24+00:00","url":"https://junglewise.ai/threats/cve-2021-46063-server-side-template-injection-in-mcms"},{"cve":"CVE-2022-22929","cvss":3.1,"epss":0.0258,"slug":"cve-2022-22929-arbitrary-file-upload-in-mingsoft-mcms","title":"Arbitrary File Upload in Mingsoft MCMS","severity":"low","exploited":false,"published_at":"2022-01-22T00:00:50+00:00","url":"https://junglewise.ai/threats/cve-2022-22929-arbitrary-file-upload-in-mingsoft-mcms"},{"cve":"CVE-2022-30506","cvss":3.1,"epss":0.0256,"slug":"cve-2022-30506-code-injection-in-mcms","title":"Code injection in MCMS","severity":"low","exploited":false,"published_at":"2022-06-03T00:01:08+00:00","url":"https://junglewise.ai/threats/cve-2022-30506-code-injection-in-mcms"}],"generated_at":"2026-09-28T03:07:00.154823+00:00"}