CVE-2026-4954 | mingSoft MCMS up to 5.5.0 Web Content List Endpoint ContentAction.java list sql injection

A vulnerability identified as critical has been detected in mingSoft MCMS up to 5.5.0. Impacted is the function list of the file net/mingsoft/cms/action/web/ContentAction.java of the component Web Content List Endpoint. The manipulation leads to sql injection.

This vulnerability is documented as CVE-2026-4954. The attack can be initiated remotely. Additionally, an exploit exists.