Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:mrcms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductMrcms (91082a1e-ba74-50ce-827e-07bbf83c27a3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-4327 vulnerable 2026-06-08 07:29:16.037359 MRCMS cross-site request forgery
MEDIUM (4.3)
A vulnerability was found in MRCMS 3.1.2. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Multiple endpoints might be affected.
Published: 2025-05-06T06:31:03.485Z
Updated: 2025-05-06T14:15:12.444Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4326 vulnerable 2026-06-08 07:29:16.036875 MRCMS Add Fragment Page add.do cross site scripting
LOW (2.4)
A vulnerability was found in MRCMS 3.1.2 and classified as problematic. This issue affects some unknown processing of the file /admin/chip/add.do of the component Add Fragment Page. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-06T06:00:09.103Z
Updated: 2025-05-06T13:45:02.425Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4325 vulnerable 2026-06-08 07:29:16.036390 MRCMS Category Management Page add.do cross site scripting
LOW (2.4)
A vulnerability has been found in MRCMS 3.1.2 and classified as problematic. This vulnerability affects unknown code of the file /admin/category/add.do of the component Category Management Page. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-06T06:00:07.206Z
Updated: 2025-05-06T13:48:31.756Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4324 vulnerable 2026-06-08 07:29:16.036018 MRCMS External Link Management Page edit.do cross site scripting
LOW (2.4)
A vulnerability, which was classified as problematic, was found in MRCMS 3.1.2. This affects an unknown part of the file /admin/link/edit.do of the component External Link Management Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-06T05:31:04.366Z
Updated: 2025-05-06T13:52:14.807Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4323 vulnerable 2026-06-08 07:29:16.034487 MRCMS Edit Article Page cross site scripting
LOW (2.4)
A vulnerability, which was classified as problematic, has been found in MRCMS 3.1.2. Affected by this issue is some unknown functionality of the component Edit Article Page. The manipulation of the argument Title leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-06T05:00:08.432Z
Updated: 2025-05-06T13:55:08.633Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4293 vulnerable 2026-06-08 07:29:15.986337 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4292 vulnerable 2026-06-08 07:29:15.985066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2196 vulnerable 2026-06-08 07:16:56.370941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2195 vulnerable 2026-06-08 07:16:56.364381 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2194 vulnerable 2026-06-08 07:16:56.363680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2193 vulnerable 2026-06-08 07:16:56.361493 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.