SS
Vendor
Sscms
16
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-82486 | SS SSCMS SiteServer | 5.0 | Aug 30 | SiteServer SSCMS Agent Installation Workflow access control |
| CVE-2026-4542 | SS SSCMS Sscms | 5.4 | Mar 22 | SSCMS layerImage Endpoint LayerImageController.Submit.cs path traversal |
| CVE-2026-4234 | SS SSCMS Sscms | 6.3 | Mar 16 | SSCMS DDL SitesAddController.Submit.cs sql injection |
| CVE-2026-4222 | SS SSCMS Sscms | 3.8 | Mar 16 | SSCMS download PathUtils.RemoveParentPath path traversal |
| CVE-2025-52237 | SS Sscms Sscms | 6.5 | Aug 5 | An issue in the component /stl/actions/download?filePath of SSCMS v7.3.1 allows attackers to execute a directory traversal |
| CVE-2025-45529 | SC Siteserver Cms Sscms | 7.1 | May 27 | An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via sending a crafted GET request to… |
| CVE-2023-43953 | SS Sscms Sscms | 5.4 | Oct 3 | SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Content Management component |
| CVE-2023-2862 | SC Siteserver Cms Sscms | 6.1 | May 24 | SiteServer CMS search cross site scripting |
| CVE-2022-44299 | SC Siteserver Cms Sscms | 4.9 | Feb 16 | SiteServerCMS 7.1.3 sscms has a file read vulnerability |
| CVE-2022-44298 | SC Siteserver Cms Sscms | 9.8 | Jan 27 | SiteServer CMS 7.1.3 is vulnerable to SQL Injection |
| CVE-2022-44297 | SC Siteserver Cms Sscms | 9.8 | Jan 26 | SiteServer CMS 7.1.3 has a SQL injection vulnerability the background |
| CVE-2022-30349 | SC Siteserver Cms Sscms | 6.1 | May 27 | siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2021-42656 | SC Siteserver Cms Sscms | 5.4 | May 24 | SiteServer CMS V6.15.51 is affected by a Cross Site Scripting (XSS) vulnerability |
| CVE-2021-42655 | SC Siteserver Cms Sscms | 8.8 | May 24 | SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability |
| CVE-2021-42654 | SC Siteserver Cms Sscms | 9.8 | May 24 | SiteServer CMS < V5.1 is affected by an unrestricted upload of a file with dangerous type (getshell), which could be used to execute arbitrary code |
| CVE-2022-28118 | SC Siteserver Cms Sscms | 9.8 | May 3 | SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in |