CVE-2025-56316
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
MCMS 5.5.0 contains a SQL injection vulnerability in the content_title parameter of the /cms/content/list endpoint. Remote attackers can execute arbitrary SQL queries via unsanitized input in FreeMarker template rendering.
Risk Assessment
Attackers can read, modify, or delete CMS database data, leading to data leakage and potential system compromise.
Recommendation
Update MCMS to a patched version or enforce input validation and parameterized SQL queries for the content_title parameter.
Other vulnerabilities in MCMS
See all- CVE-2026-88416Critical
MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in the custom model/form import feature.
- CVE-2026-88414Critical
MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability in the PageAction.verify endpoint (GET /ms/mdiy/page/verify.do).
- CVE-2026-68000Critical
The /cms/category/list interface in MCMS <=6.2.0 is vulnerable to SQL injection. The size parameter is directly concatenated into the LIMIT clause via FreeMarker ${size} without parameterization. The SqlInjectionUtil filter does not block keywords like CREATE/TABLE/SET/PREPARE/EXECUTE, allowing bypass and execution of stacked SQL statements without login.
- CVE-2025-29287Critical
An arbitrary file upload vulnerability was found in the ueditor component of MCMS version 5.4.3. Attackers can exploit this flaw to execute arbitrary code by uploading a crafted file.
- CVE-2026-88415High
MCMS 6.1.1 through 6.2.1 is vulnerable to stored Cross-Site Scripting (XSS). The article content field `contentDetails` is excluded from the global XSS filter.
- CVE-2026-52203High
Vulnerability in MCMS version 6.1.1 allows a remote attacker to obtain sensitive information via the source parameter.
- CVE-2025-60837Medium
A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload.
- CVE-2025-60838Medium
An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code by uploading a crafted file.
Original NVD description (English source)
A SQL injection vulnerability in the content_title parameter of the /cms/content/list endpoint in MCMS 5.5.0 allows remote attackers to execute arbitrary SQL queries via unsanitized input in the FreeMarker template rendering.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS