CVE-2025-52237

all versions

An issue in the component /stl/actions/download?filePath of SSCMS v7.3.1 allows attackers to execute a directory traversal.

6.5MEDIUM

CVE-2025-45529

all versions

An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files

7.1HIGH

CVE-2023-43953

all versions

SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Content Management component.

5.4MEDIUM

CVE-2023-43952

all versions

SSCMS 7.2.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Material Management component.

5.4MEDIUM

CVE-2023-43951

all versions

SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Column Management component.

5.4MEDIUM

CVE-2023-2862

<= 7.2.1

A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of

3.5LOW

CVE-2022-44299

all versions

SiteServerCMS 7.1.3 sscms has a file read vulnerability.

4.9MEDIUM

CVE-2022-44298

all versions

SiteServer CMS 7.1.3 is vulnerable to SQL Injection.

9.8CRITICAL

CVE-2022-44297

all versions

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background.

9.8CRITICAL

CVE-2022-30349

all versions

siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS).

6.1MEDIUM

CVE-2021-42656

all versions

SiteServer CMS V6.15.51 is affected by a Cross Site Scripting (XSS) vulnerability.

5.4MEDIUM

CVE-2021-42655

all versions

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.

8.8HIGH

CVE-2021-42654

< 5.1

SiteServer CMS < V5.1 is affected by an unrestricted upload of a file with dangerous type (getshell), which could be used to execu

9.8CRITICAL

CVE-2022-28118

>= 7.0.0 and <= 7.1.2

SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.

9.8CRITICAL

CVE-2006-1405

<= 2.1.0

Cross-site scripting (XSS) vulnerability in search.aspx in SweetSuite.NET Content Management System (ssCMS) 2.1.0 and earlier allo