Description
MCMS v5.2.5 was discovered to contain a Server Side Template Injection (SSTI) vulnerability via the Template Management module.
Remediation
References
https://github.com/ming-soft/MCMS/issues/59
Related Vulnerabilities
CVE-2022-24898 Vulnerability in maven package org.xwiki.commons:xwiki-commons-xml
CVE-2020-8237 Vulnerability in maven package org.webjars.npm:json-bigint
CVE-2017-16200 Vulnerability in npm package uv-tj-demo
CVE-2021-3645 Vulnerability in npm package @viking04/merge
CVE-2022-23463 Vulnerability in maven package com.nepxion:discovery-commons