{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"6.0.1"}],"component":"net.mingsoft:ms-mcms","cve_ids":["CVE-2025-60837"],"ecosystem":"Maven","epss":0.00204,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-wvv5-5g6x-hp7j","id":"tcs_01M5N9H7YDDC7D71Q4MVTH3KH9","modified_at":"2025-10-23T22:44:43.351562Z","published_at":"2025-10-23T21:31:43Z","references":["https://osv.dev/vulnerability/GHSA-wvv5-5g6x-hp7j","https://nvd.nist.gov/vuln/detail/CVE-2025-60837","https://gist.github.com/xuzhiwei66666666/5cec37c9f674a08bc0d8654d42b4137a","https://gitee.com/mingSoft/MCMS","https://github.com/ming-soft/MCMS","http://mcms.com"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-wvv5-5g6x-hp7j","url":"https://osv.dev/vulnerability/GHSA-wvv5-5g6x-hp7j"}],"summary":"MCMS reflected cross-site scripting (XSS) vulnerability"}