CVE-2025-50581

MRCMS v3.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/group/save.do.

CVSS v3.1

4.8 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0.19% chance of exploitation in the next 30 days, 9th percentile

Published

2025-07-18

Updated

2026-07-05

Proof-of-concept exploits (1)

• SimonKang949/Vulnerabilities/issues/6

References

• CVE Record
• NVD entry

Related

• CVE-2025-50582
• CVE-2025-50583
• CVE-2025-50584
• CVE-2025-50586
• CVE-2025-5058
• CVE-2025-50578