CVE-2025-29287
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
An arbitrary file upload vulnerability was found in the ueditor component of MCMS version 5.4.3. Attackers can exploit this flaw to execute arbitrary code by uploading a crafted file.
Risk Assessment
The risk for the organization includes remote code execution by an unauthenticated attacker, potentially leading to server compromise and data theft.
Recommendation
Immediately update MCMS to the latest version and implement file type validation mechanisms in the ueditor component.
Other vulnerabilities in MCMS
See all- CVE-2026-68000Low risk· EPSS 5%
The /cms/category/list interface in MCMS <=6.2.0 is vulnerable to SQL injection. The size parameter is directly concatenated into the LIMIT clause via FreeMarker ${size} without parameterization. The SqlInjectionUtil filter does not block keywords like CREATE/TABLE/SET/PREPARE/EXECUTE, allowing bypass and execution of stacked SQL statements without login.
- CVE-2026-52203High
Vulnerability in MCMS version 6.1.1 allows a remote attacker to obtain sensitive information via the source parameter.
- CVE-2025-60837Medium
A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload.
- CVE-2025-60838Medium
An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code by uploading a crafted file.
Original NVD description (English source)
An arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file.