CVE-2025-51818

MCCMS 2.7.0 is vulnerable to Arbitrary file deletion in the Backups.php component

Medium · published August 21, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
16.5
In the wild
Unconfirmed
What it is

MCCMS 2.7.0 is vulnerable to Arbitrary file deletion in the Backups.php component. This allows an attacker to execute arbitrary commands

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00258 · 16.5th percentile
Published
2025-08-21T00:00Z
EPSS history
Timeline
  • 21 AUG 00:00Z
    MCCMS 2.7.0 is vulnerable to Arbitrary file deletion in the Backups.php component
    cvelistv5