CVE-2022-22929: Mingsoft Mcms

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

MCMS v5.2.4 was discovered to have an arbitrary file upload vulnerability in the New Template module, which allows attackers to execute arbitrary code via a crafted ZIP file.

Affected products

• Mingsoft Mcms: version 5.2.4 only

Published 2022-01-21. Last modified 2026-06-17.