CVE-2025-60837
1 advisory.
Maven/net.mingsoft:ms-mcms CVE-2025-60837: medium 6.1, EPSS 0.20%
MCMS reflected cross-site scripting (XSS) vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 6.0.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-wvv5-5g6x-hp7j
- https://nvd.nist.gov/vuln/detail/CVE-2025-60837
- https://gist.github.com/xuzhiwei66666666/5cec37c9f674a08bc0d8654d42b4137a
- https://gitee.com/mingSoft/MCMS
- https://github.com/ming-soft/MCMS
- http://mcms.com
CVE-2025-60837 · published · modified · JSON