CVE-2026-7578 | MacCMS Pro up to 2022.1.3 Plugin Installation add.html install unrestricted upload

A vulnerability, which was classified as critical, was found in MacCMS Pro up to 2022.1.3. This vulnerability affects the function install of the file /admi.php/admin/addon/add.html of the component Plugin Installation Handler. Executing a manipulation can lead to unrestricted upload.

This vulnerability appears as CVE-2026-7578. The attack may be performed from remote. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.