Vulnerabilities

TI-2025-28799 CVE-2025-45529 · GHSA-89j4-2255-gq9x

An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1…

MEDIUM 64

An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via sending a crafted GET request to /cms/templates/templatesAssetsEditor.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00371 Published 2025-05-27 No fix listed CWE-552

TI-2023-02682 CVE-2023-2862 · GHSA-63c6-w556-3h7q

SiteServer CMS search cross site scripting

LOW 28

A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00561 Published 2023-05-24 No fix listed CWE-79

TI-2022-21767 CVE-2022-44299 · GHSA-cgg7-m2mr-pjh4

SiteServerCMS 7.1.3 sscms has a file read vulnerability.

LOW 24

SiteServerCMS 7.1.3 sscms has a file read vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00826 Published 2023-02-16 No fix listed CWE-22

TI-2022-21766 CVE-2022-44298 · GHSA-497q-ww65-hm5w

SiteServer CMS 7.1.3 is vulnerable to SQL Injection.

HIGH 82

SiteServer CMS 7.1.3 is vulnerable to SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00749 Published 2023-01-27 No fix listed CWE-89

TI-2022-21765 CVE-2022-44297 · GHSA-qghp-g4m6-3qjp

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background.

HIGH 82

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00982 Published 2023-01-26 No fix listed CWE-89

TI-2022-12574 CVE-2022-30349 · GHSA-4qf6-vpj8-p4r6

siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS).

LOW 28

siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00686 Published 2022-05-27 No fix listed CWE-79

TI-2021-18888 CVE-2021-42656 · GHSA-2xwp-7j3p-c78x

SiteServer CMS V6.15.51 is affected by a Cross Site Scripting (XSS) vulnerability.

LOW 26

SiteServer CMS V6.15.51 is affected by a Cross Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00712 Published 2022-05-24 No fix listed CWE-79

TI-2021-18887 CVE-2021-42655 · GHSA-5xr5-v2h7-2w7w

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.

MEDIUM 41

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01223 Published 2022-05-24 No fix listed CWE-89

TI-2021-18886 CVE-2021-42654 · GHSA-mpcp-76x2-2jrq

SiteServer CMS < V5.1 is affected by an unrestricted upload of a file with dangerous type…

MEDIUM 46

SiteServer CMS < V5.1 is affected by an unrestricted upload of a file with dangerous type (getshell), which could be used to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0181 Published 2022-05-24 No fix listed CWE-434

TI-2022-10923 CVE-2022-28118 · GHSA-q469-j32f-h7vm

SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.

MEDIUM 47

SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02771 Published 2022-05-03 No fix listed

Vulnerabilities

Filters