VendorsSSCMSsiteserver_cmsall versions
Vulnerabilities

SSCMS SiteServer CMS

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs
CVE-2022-28118
SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.
Published 2022-05-03 · Modified
9.8EPSS 0.028
CVE-2021-42654
SiteServer CMS < V5.1 is affected by an unrestricted upload of a file with dangerous type (getshell), which could be used to execute arbitrary code.
Published 2022-05-24 · Modified
9.8EPSS 0.017
CVE-2022-44297
SiteServer CMS 7.1.3 has a SQL injection vulnerability the background.
Published 2023-01-26 · Modified
9.8EPSS 0.010
CVE-2022-44298
SiteServer CMS 7.1.3 is vulnerable to SQL Injection.
Published 2023-01-27 · Modified
9.8EPSS 0.007
CVE-2021-42655
SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.
Published 2022-05-24 · Modified
8.8EPSS 0.012
CVE-2025-45529
An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via sending a crafted GET request to /cms/templates/templatesAssetsEditor.
Published 2025-05-27 · Analyzed
7.1EPSS 0.003
CVE-2022-30349
siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS).
Published 2022-05-27 · Modified
6.1EPSS 0.007
CVE-2023-2862
SiteServer CMS search cross site scripting
Published 2023-05-24 · Modified
6.1EPSS 0.006
CVE-2021-42656
SiteServer CMS V6.15.51 is affected by a Cross Site Scripting (XSS) vulnerability.
Published 2022-05-24 · Modified
5.4EPSS 0.007
CVE-2022-44299
SiteServerCMS 7.1.3 sscms has a file read vulnerability.
Published 2023-02-16 · Modified
4.9EPSS 0.008