[net.mingsoft:ms-mcms] Code injection in MCMS

An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-30506
• https://gitee.com/mingSoft/MCMS/issues/I56AID
• https://github.com/advisories/GHSA-6xj9-hpq3-w3qw