CVE-2025-60838

Impact

An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code via uploading a crafted file.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://gist.github.com/xuzhiwei66666666/8a990104861ce31cf73ea38e7eb32a7d
• https://gitee.com/mingSoft/MCMS