MMingSoft

Products

Exploited and recent CVEs

• CVE-2026-19357 Medium 5.3 MingSoft MCMS ms-mdiy get information disclosure 0.5%
• CVE-2026-19356 Medium 5.3 MingSoft MCMS ms-mdiy list information disclosure 0.5%
• CVE-2026-19355 High 7.3 MingSoft MCMS ms-mdiy list.do ModelDataImpl.queryDiyFormData sql injection 0.4%
• CVE-2026-4954 Medium 6.3 mingSoft MCMS Web Content List Endpoint ContentAction.java list sql injection 0.2%
• CVE-2026-4953 High 7.3 mingSoft MCMS Editor Endpoint BaseAction.java catchImage server-side request forgery 0.3%
• CVE-2026-2666 Medium 4.7 mingSoft MCMS Template Archive uploadTemplate.do unrestricted upload 0.4%
• CVE-2023-3990 Low 3.5 Mingsoft MCMS HTTP POST Request search.do cross site scripting 1.4%
• CVE-2022-4640 Low 3.5 Mingsoft MCMS Article save cross site scripting 0.4%
• CVE-2022-4375 Medium 6.3 Mingsoft MCMS list sql injection 3.1%
• CVE-2022-4350 Low 3.5 Mingsoft MCMS search.do cross site scripting 0.4%