Sscms

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Sscms records in CISA KEV

No Sscms vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Sscms · all components

TI-2025-32514 CVE-2025-52237 · GHSA-9c5f-cjmg-7rfh

LOW 29

An issue in the component /stl/actions/download?filePath of SSCMS v7.3.1 allows attackers to execute a directory traversal.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00487 Published 2025-08-05 No fix listed CWE-27

TI-2023-23570 CVE-2023-43953 · GHSA-55q8-wmcv-j7hg

LOW 24

SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Content Management component.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00349 Published 2023-10-03 No fix listed CWE-79