CVE-2024-22567
High · 8.8CVSS
8.8
EPSS
17.8%
Published
Feb 5, 2024
CISA due date
—
The record
File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | net.mingsoft:ms-mcms | 0 | No fix |
Related vulnerabilities
- CVE-2026-2666 A flaw has been found in mingSoft MCMS 6.1.1. Also affects net.mingsoft:ms-mcms
- CVE-2025-60837 A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to… Also affects net.mingsoft:ms-mcms
- CVE-2022-22930 A remote code execution (RCE) vulnerability in the Template Management function of MCMS… Also affects net.mingsoft:ms-mcms
- CVE-2026-8778 The MIPL Grouped Checkout Fields for WooCommerce – Customize & Organize Checkout Fields. CWE-434
- CVE-2026-12215 The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Authentication… CWE-434
- CVE-2026-18351 The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to… CWE-434
- CVE-2026-71805 An arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0. CWE-434
- CVE-2026-26212 Rara One Click Demo Import plugin for WordPress before 1.3.5 contains an arbitrary file… CWE-434