PT-2025-41588 · Mcms · Mcms

Published 2025-10-10 · Updated 2025-10-11 · CVE-2025-60838

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions MCMS version 6.0.1

Description An arbitrary file upload issue exists in MCMS version 6.0.1, potentially allowing attackers to execute code by uploading a specially crafted file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2025-60838

Affected Products

Mcms

References · 8

• https://osv.dev/vulnerability/CVE-2025-60838 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-60838 · Security Note
• https://t.me/CVEtracker/34613 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1976814585102340590 · Twitter Post
• https://twitter.com/CVEnew/status/1976714761678000354 · Twitter Post
• https://gist.github.com/xuzhiwei66666666/8a990104861ce31cf73ea38e7eb32a7d · Note
• https://gitee.com/mingSoft/MCMS · Note
• http://mcms.com · Note