CVE-2026-88415
MCMS 6.1.1 through 6.2.1 is vulnerable to stored Cross-Site Scripting (XSS). The article content field `contentDetails` is excluded from the global XSS filter.
- Published Sep 22, 2026
- CVSS 8.7 high
- 0.3% chance of exploitation in the next 30 days (EPSS)