Filtered by vendor Mcms Subscriptions
Filtered by product Mcms Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-88416 1 Mcms 1 Mcms 2026-10-07 9.8 Critical
MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in the custom model/form import feature.
CVE-2026-88414 1 Mcms 1 Mcms 2026-09-26 9.8 Critical
MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability in the PageAction.verify endpoint (GET /ms/mdiy/page/verify.do).