CVE-2022-22930
Critical · 9.8CVSS
9.8
EPSS
23.7%
Published
Jan 21, 2022
CISA due date
—
The record
A remote code execution (RCE) vulnerability in the Template Management function of MCMS v5.2.4 allows attackers to execute arbitrary code via a crafted payload.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | net.mingsoft:ms-mcms | 0 | 5.2.9 |
Related vulnerabilities
- CVE-2026-2666 A flaw has been found in mingSoft MCMS 6.1.1. Also affects net.mingsoft:ms-mcms
- CVE-2025-60837 A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to… Also affects net.mingsoft:ms-mcms
- CVE-2024-22567 File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via… Also affects net.mingsoft:ms-mcms