Sscms

sscms

12 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (12)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-52237 1Sscms 1Sscms Jul 5, 2026 Aug 5, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue in the component /stl/actions/download?filePath of SSCMS v7.3.1 allows attackers to execute a directory traversal.
CVE-2025-45529 1Sscms 1Siteserver Cms Jun 17, 2026 May 27, 2025 N/A· v4 7.1 HIGH· v3 N/A· v2 An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via sending a crafted GET request to /cms/templates/templatesAssetsEditor.
CVE-2023-43953 1Sscms 1Sscms Jun 17, 2026 Oct 3, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Content Management component.
CVE-2023-2862 1Sscms 1Siteserver Cms Jun 17, 2026 May 24, 2023 N/A· v4 6.1 MEDIUM· v3 4.0 MEDIUM· v2 A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cros...Show more A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-229818 is the identifier assigned to this vulnerability.Show less
CVE-2022-44299 1Sscms 1Siteserver Cms Jun 17, 2026 Feb 16, 2023 N/A· v4 4.9 MEDIUM· v3 N/A· v2 SiteServerCMS 7.1.3 sscms has a file read vulnerability.
CVE-2022-44298 1Sscms 1Siteserver Cms Jun 17, 2026 Jan 27, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 SiteServer CMS 7.1.3 is vulnerable to SQL Injection.
CVE-2022-44297 1Sscms 1Siteserver Cms Jun 17, 2026 Jan 26, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 SiteServer CMS 7.1.3 has a SQL injection vulnerability the background.
CVE-2022-30349 1Sscms 1Siteserver Cms Jun 17, 2026 Jun 2, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS).
CVE-2021-42656 1Sscms 1Siteserver Cms Jun 17, 2026 May 24, 2022 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 SiteServer CMS V6.15.51 is affected by a Cross Site Scripting (XSS) vulnerability.
CVE-2021-42655 1Sscms 1Siteserver Cms Jun 17, 2026 May 24, 2022 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.
CVE-2021-42654 1Sscms 1Siteserver Cms Jun 17, 2026 May 24, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SiteServer CMS < V5.1 is affected by an unrestricted upload of a file with dangerous type (getshell), which could be used to execute arbitrary code.
CVE-2022-28118 1Sscms 1Siteserver Cms Jul 9, 2026 May 3, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.