CVE-2025-56316

Vulnerability Description

A SQL injection vulnerability in the content_title parameter of the /cms/content/list endpoint in MCMS 5.5.0 allows remote attackers to execute arbitrary SQL queries via unsanitized input in the FreeMarker template rendering.

Vulnerability Details

Published Date

October 17, 2025

Last Modified

October 28, 2025

Source

NVD

CVE-2025-56316

Vulnerability Description

Vulnerability Details

Discussion (0)

Add Comment