MCMS versions 6.1.1 through 6.2.1 are affected by a stored Cross-Site Scripting (XSS) vulnerability. Specifically, the article content field named `contentDetails` is excluded from the global XSS filtering mechanism, which allows attackers to inject malicious scripts that are stored and later executed when viewed by users. This vulnerability could enable attackers to execute arbitrary scripts in the context of the affected web application.

The stored XSS vulnerability allows attackers to inject malicious scripts into the `contentDetails` field of articles. When other users view the affected content, these scripts may execute in their browsers, potentially leading to session hijacking, defacement, or other malicious actions within the context of the vulnerable application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider applying input validation or output encoding on the `contentDetails` field as a temporary mitigation. Avoid using or displaying untrusted content in this field without proper sanitization.