CVE-2026-88415

Name of the Vulnerable Software and Affected Versions MCMS versions 6.1.1 through 6.2.1

Description Stored Cross-Site Scripting (XSS) occurs because the article content field contentDetails is excluded from the global XSS filter. Cross-Site Scripting is a flaw that allows an attacker to inject malicious scripts into web pages viewed by other users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict the use of the contentDetails field to trusted users to minimize the risk of exploitation.