CVE-2025-51818

5.4 mediumEPSS 0.3%

Medium (5.4) in chshcms mccms. EPSS 0.3% chance of exploitation in the next 30 days.

MCCMS 2.7.0 is vulnerable to Arbitrary file deletion in the Backups.php component. This allows an attacker to execute arbitrary commands

Severity

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWE: CWE-552
Published: 2025-08-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19