GHSA-wvv5-5g6x-hp7j
MCMS reflected cross-site scripting (XSS) vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | net.mingsoft:ms-mcms | <= 6.0.1 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload.
References
External links from the advisory. They lead to third-party sites.