MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via search.do in the file /web/MCmsAction.java. References https://nvd.nist.gov/vuln/detail/CVE-2022-23899 https://github.com/ming-soft/MCMS/issues/63 https://github.com/advisories/GHSA-968c-mm28-jfw4
