Priority LOW 29
An issue in the component /stl/actions/download?filePath of SSCMS v7.3.1 allows attackers to execute a directory traversal.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00487 · Published 2025-08-05 · No fix listed CWE-27
Priority MEDIUM 64
An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via sending a crafted GET request to /cms/templates/templatesAssetsEditor.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00371 · Published 2025-05-27 · No fix listed CWE-552
Priority LOW 24
SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Content Management component.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00349 · Published 2023-10-03 · No fix listed CWE-79
Priority LOW 28
A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00561 · Published 2023-05-24 · No fix listed CWE-79
Priority LOW 24
SiteServerCMS 7.1.3 sscms has a file read vulnerability.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00826 · Published 2023-02-16 · No fix listed CWE-22
Priority HIGH 82
SiteServer CMS 7.1.3 is vulnerable to SQL Injection.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00749 · Published 2023-01-27 · No fix listed CWE-89
Priority HIGH 82
SiteServer CMS 7.1.3 has a SQL injection vulnerability the background.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00982 · Published 2023-01-26 · No fix listed CWE-89
Priority LOW 28
siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS).
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00686 · Published 2022-05-27 · No fix listed CWE-79
Priority LOW 26
SiteServer CMS V6.15.51 is affected by a Cross Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00712 · Published 2022-05-24 · No fix listed CWE-79
Priority MEDIUM 41
SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01223 · Published 2022-05-24 · No fix listed CWE-89
Priority MEDIUM 46
SiteServer CMS < V5.1 is affected by an unrestricted upload of a file with dangerous type (getshell), which could be used to execute arbitrary code.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0181 · Published 2022-05-24 · No fix listed CWE-434
Priority MEDIUM 47
SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02771 · Published 2022-05-03 · No fix listed
THREATIST.IORead the docs