CVE-2021-45786: Maccms

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid" parameters to gain privileges.

Affected products

• Maccms Maccms: version 10.0 only

Published 2022-03-16. Last modified 2026-06-17.