← Back

Sscms

sscms

Vendor: Sscms • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-52237
1Sscms
1Sscms
Jul 5, 2026
Aug 5, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An issue in the component /stl/actions/download?filePath of SSCMS v7.3.1 allows attackers to execute a directory traversal.
CVE-2023-43953
1Sscms
1Sscms
Jun 17, 2026
Oct 3, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Content Management component.