Mrcms vulnerabilities

Products

• Mrcms 22

Newest

• mrcms MRCMS 3.1.2 contains an access control vulnerability. The save() method in src/main/java/org... CVE-2026-31272 9.8 CriticalApril 7, 2026
• mrcms MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file... CVE-2026-29909 Public exploit 5.3 MediumMarch 30, 2026
• mrcms MRCMS v3.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the... CVE-2025-50581 4.8 MediumJuly 18, 2025
• mrcms MRCMS cross-site request forgery CVE-2025-4327 5.3 MediumMay 6, 2025
• mrcms MRCMS Add Fragment Page add.do cross site scripting CVE-2025-4326 4.8 MediumMay 6, 2025
• mrcms MRCMS Category Management Page add.do cross site scripting CVE-2025-4325 4.8 MediumMay 6, 2025
• mrcms MRCMS External Link Management Page edit.do cross site scripting CVE-2025-4324 4.8 MediumMay 6, 2025
• mrcms MRCMS Edit Article Page cross site scripting CVE-2025-4323 4.8 MediumMay 6, 2025
• mrcms MRCMS Group Edit Page edit.do cross site scripting CVE-2025-4293 4.8 MediumMay 5, 2025
• mrcms MRCMS Edit User Page edit.do cross site scripting CVE-2025-4292 4.8 MediumMay 5, 2025
• mrcms MRCMS org.marker.mushroom.controller.FileController upload.do upload cross site scripting CVE-2025-2196 5.1 MediumMarch 11, 2025
• mrcms MRCMS org.marker.mushroom.controller.FileController rename.do rename cross site scripting CVE-2025-2195 5.1 MediumMarch 11, 2025
• mrcms MRCMS org.marker.mushroom.controller.FileController list.do list cross site scripting CVE-2025-2194 5.1 MediumMarch 11, 2025
• mrcms MRCMS org.marker.mushroom.controller.FileController delete.do delete path traversal CVE-2025-2193 5.3 MediumMarch 11, 2025
• mrcms MRCMS v3.1.2 was discovered to contain a server-side template injection (SSTI) vulnerability in... CVE-2025-25768 5.4 MediumFebruary 21, 2025
• mrcms A vertical privilege escalation vulnerability in the component /controller/UserController.java of... CVE-2025-25767 4.8 MediumFebruary 21, 2025
• mrcms An arbitrary file upload vulnerability in the component /file/savefile.do of MRCMS v3.1.2 allows... CVE-2025-25766 4.8 MediumFebruary 21, 2025
• mrcms MRCMS v3.1.2 was discovered to contain an arbitrary file write vulnerability via the component ... CVE-2025-25765 4.0 MediumFebruary 21, 2025
• mrcms MRCMS 3.1.2 contains a SQL injection vulnerability via the RID parameter in /admin/article/delete... CVE-2024-48177 8.8 HighOctober 28, 2024
• mrcms SQL Injection vulnerability in MRCMS v3.1.2 allows attackers to run arbitrary system commands via... CVE-2024-25428 6.5 MediumFebruary 20, 2024
• mrcms MRCMS 3.0 contains an Arbitrary File Read vulnerability in /admin/file/edit.do as the incoming... CVE-2024-24161 7.5 HighFebruary 2, 2024
• mrcms MRCMS 3.0 contains a Cross-Site Scripting (XSS) vulnerability via /admin/system/saveinfo.do. CVE-2024-24160 5.4 MediumFebruary 2, 2024