Sscms Siteserver Cms
10 CVEs affecting Sscms Siteserver Cms. Latest disclosed: 2025-05-27. Critical: 4, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-44298 | Critical | 9.8 | 2023-01-27 | SiteServer CMS 7.1.3 is vulnerable to SQL Injection. |
CVE-2022-44297 | Critical | 9.8 | 2023-01-26 | SiteServer CMS 7.1.3 has a SQL injection vulnerability the background. |
CVE-2021-42654 | Critical | 9.8 | 2022-05-24 | SiteServer CMS < V5.1 is affected by an unrestricted upload of a file with dangerous type (getshell), which could be used to execute arbitrary code. |
CVE-2022-28118 | Critical | 9.8 | 2022-05-03 | SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in. |
CVE-2021-42655 | High | 8.8 | 2022-05-24 | SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability. |
CVE-2025-45529 | High | 7.1 | 2025-05-27 | An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via sending a crafted GET re… |
CVE-2022-30349 | Medium | 6.1 | 2022-06-02 | siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS). |
CVE-2021-42656 | Medium | 5.4 | 2022-05-24 | SiteServer CMS V6.15.51 is affected by a Cross Site Scripting (XSS) vulnerability. |
CVE-2022-44299 | Medium | 4.9 | 2023-02-16 | SiteServerCMS 7.1.3 sscms has a file read vulnerability. |
CVE-2023-2862 | Low | 3.5 | 2023-05-24 | A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/sea… |