An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do.
CVSS Score
9.8
EPSS Score
0.003
Published
2021-01-26