CVE-2026-7578 | MacCMS Pro up to 2022.1.3 Plugin Installation add.html install unrestricted upload

SecurityVulns
Yanac

A vulnerability, which was classified as critical, was found in MacCMS Pro up to 2022.1.3. This vulnerability affects the function install of the file /admi.php/admin/addon/add.html of the component Plugin Installation Handler. Executing a manipulation can lead to unrestricted upload.

This vulnerability appears as CVE-2026-7578. The attack may be performed from remote. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More