CVE-2024-22567: Mingsoft Mcms

High severity, CVSS 8.8. EPSS: 17.8% chance of exploitation in the next 30 days.

File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do.

Affected products

• Mingsoft Mcms: version 5.3.5 only

Published 2024-02-05. Last modified 2026-06-17.