MCMS 6.1.1 through 6.2.1 is vulnerable to stored Cross-Site Scripting (XSS). The article content field `contentDetails` is excluded from the global XSS filter.
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Tue, 22 Sep 2026 21:45:00 +0000

Type Values Removed Values Added
Title Stored XSS Vulnerability in MCMS Article Content Field
Weaknesses CWE-79

Tue, 22 Sep 2026 19:00:00 +0000

Type Values Removed Values Added
Description MCMS 6.1.1 through 6.2.1 is vulnerable to stored Cross-Site Scripting (XSS). The article content field `contentDetails` is excluded from the global XSS filter.
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-09-22T18:54:41.393Z

Reserved: 2026-09-10T00:00:00.000Z

Link: CVE-2026-88415

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-22T19:16:55.367

Modified: 2026-09-22T19:44:01.280

Link: CVE-2026-88415

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-22T21:30:20Z

Weaknesses