critical9.8
CVE-2026-88414
MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability in the PageAction.verify endpoint (GET /ms/mdiy/page/verify.do).
Impact
MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability in the PageAction.verify endpoint (GET /ms/mdiy/page/verify.do).
Affected products
| Product | Affected versions |
|---|---|
| MCMS 6.1.1 | through 6.2.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.