Threats tagged 'ghsa-vv7j-2jc2-7r2w'

MCMS versions 6.1.1 through 6.2.1 contain a critical SQL injection vulnerability in the custom model/form import feature. This vulnerability allows unauthenticated attackers to execute arbitrary SQL commands, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. The vulnerability has a CVSS score of 9.8, indicating critical severity. No patch or remediation information is currently provided.