Approved changes feed: RSS · Atom

cpe:2.3:a:mingsoft:mcms:5.5.0:*:*:*:*:*:*:*

part: a version: 5.5.0 update: *

VendorMingsoft (eb40bbd4-cf90-5441-862d-0610394bbddf)
ProductMcms (3c194228-42fa-5fd1-8adf-8c97a9695f34)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/ming-soft/mcms purl2cpe 2026-06-01 10:14:40.770460
pkg:maven/net.mingsoft/ms-mcms purl2cpe 2026-06-01 10:14:40.770461

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-56316 vulnerable 2026-06-08 07:33:15.586603 Details available
A SQL injection vulnerability in the content_title parameter of the /cms/content/list endpoint in MCMS 5.5.0 allows remote attackers to execute arbitrary SQL queries via unsanitized input in the FreeMarker template rendering.
Published: 2025-10-17T00:00:00.000Z
Updated: 2025-10-20T19:53:27.895Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.