CyberRota Analysis
AI-GeneratedMCMS versions 6.1.1 to 6.2.1 are susceptible to stored Cross-Site Scripting (XSS) due to the `contentDetails` field being improperly excluded from the global XSS filter. This vulnerability could allow attackers to inject malicious scripts that execute in the context of users accessing the affected content, potentially leading to data theft or session hijacking. Organizations using these versions of MCMS should prioritize remediation to protect against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MCMS 6.1.1 through 6.2.1 is vulnerable to stored Cross-Site Scripting (XSS). The article content field `contentDetails` is excluded from the global XSS filter.