Mccms vulnerabilities

2 known vulnerabilities in Mccms from Chshcms. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  mccms: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-5328May 29, 2025ChshcmsEPSS 1.31%

  A vulnerability was found in chshcms mccms 2.7. It has been declared as critical. This vulnerability affects the function restore_del of the file /sys/apps/controllers/admin/Backups.php. The manipulation of the argument dirs leads to path traversal. The attack

• 8.8 High severity

  mccms: Server-Side Request Forgery

  CVE-2025-5327May 29, 2025Chshcms

  A vulnerability was found in chshcms mccms 2.7. It has been classified as critical. This affects the function index of the file sys/apps/controllers/api/Gf.php. The manipulation of the argument pic leads to server-side request forgery. It is possible to initia