MacCMS vulnerabilities
We track 3 vulnerabilities in MacCMS products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 23, 2026.
Latest MacCMS vulnerabilities
- 7.3 High severity
MacCMS: Improper Authentication
A security flaw has been discovered in MacCMS 2025.1000.4052. This affects an unknown part of the file application/api/controller/Timming.php of the component Timming API Endpoint. The manipulation results in missing authentication. The attack may be performed
- 7.2 High severity
Maccms10: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in Maccms10 2025.1000.4050. Affected is the function rep of the file application/admin/controller/Database.php. Performing manipulation of the argument where results in sql injection. The attack can be initiated remotely. The exploit
- 8.8 High severity
Maccms: Server-Side Request Forgery
A Server-Side Request Forgery (SSRF) in maccms10 v2021.1000.2000 allows attackers to force the application to make arbitrary requests via a crafted payload injected into the Name parameter under the Interface address module.