Sscms 12 CVEs across 2 Sscms products. Browse Sscms vulnerabilities, severities, and proof-of-concept exploits.
Sscms products with known CVEs Sscms CVEs — newest first CVE Severity Score Published Summary CVE-2025-52237Medium 6.52025-08-05 An issue in the component /stl/actions/download?filePath of SSCMS v7.3.1 allows attackers to execute a directory traversal. CVE-2025-45529High 7.12025-05-27 An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via sending a crafted GET re… CVE-2023-43953Medium 5.42023-10-03 SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Content Management component. CVE-2023-2862Low 3.52023-05-24 A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/sea… CVE-2022-44299Medium 4.92023-02-16 SiteServerCMS 7.1.3 sscms has a file read vulnerability. CVE-2022-44298Critical 9.82023-01-27 SiteServer CMS 7.1.3 is vulnerable to SQL Injection. CVE-2022-44297Critical 9.82023-01-26 SiteServer CMS 7.1.3 has a SQL injection vulnerability the background. CVE-2022-30349Medium 6.12022-06-02 siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS). CVE-2021-42656Medium 5.42022-05-24 SiteServer CMS V6.15.51 is affected by a Cross Site Scripting (XSS) vulnerability. CVE-2021-42655High 8.82022-05-24 SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability. CVE-2021-42654Critical 9.82022-05-24 SiteServer CMS < V5.1 is affected by an unrestricted upload of a file with dangerous type (getshell), which could be used to execute arbitrary code. CVE-2022-28118Critical 9.82022-05-03 SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.