critical9.8
CVE-2023-26781
SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center ->Reader Comments ->Search.
Impact
SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center ->Reader Comments ->Search.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chshcms | Mccms | Version 2.6 |