CVE-2025-50581

MediumCVSS 4.8

Published: 18/07/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile - higher than 9% of all known CVEs

Summary

MRCMS v3.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the /admin/group/save.do component. An attacker can inject a malicious script that will be executed in the administrator's browser.

Risk Assessment

The risk involves potential session hijacking, data theft, or unauthorized actions in the admin panel.

Recommendation

Update MRCMS to the latest version that fixes this vulnerability and apply input filtering and encoding in the /admin/group/save.do component.

Original NVD description (English source)

MRCMS v3.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/group/save.do.