CVE-2022-27340: Mingsoft Mcms

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data.

Affected products

• Mingsoft Mcms: version 5.2.7 only

Published 2022-04-22. Last modified 2026-06-17.