SS
Product
SSCMS
by Sscms · last CVE Aug 30, 2026
6
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 5Low 1
Watch

Add SSCMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-52237
6.5
0%
Aug 5
An issue in the component /stl/actions/download?filePath of SSCMS v7.3.1 allows attackers to execute a directory traversal
Affected: 7.3.1
CVE-2026-4234
6.3
0%
Mar 16
SSCMS DDL SitesAddController.Submit.cs sql injection
Affected: 7.4.0
CVE-2026-4542
5.4
0%
Mar 22
SSCMS layerImage Endpoint LayerImageController.Submit.cs path traversal
Affected: 4.7.0
CVE-2023-43953
5.4
0%
Oct 3
SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Content Management component
Affected: 7.2.2
CVE-2026-82486
5.0
0%
Aug 30
SiteServer SSCMS Agent Installation Workflow access control
Affected: 7.4.0
CVE-2026-4222
3.8
0%
Mar 16
SSCMS download PathUtils.RemoveParentPath path traversal
Affected: 7.0; 7.1; 7.2; 7.3; 7.4.0
Showing 6