Sscms Siteserver Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Sscms Siteserver Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2021-42654 — CVSS 9.8 (critical): SiteServer CMS < V5.1 is affected by an unrestricted upload of a file with dangerous type (getshell), which could be used to execute…
• CVE-2022-28118 — CVSS 9.8 (critical): SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.
• CVE-2022-44297 — CVSS 9.8 (critical): SiteServer CMS 7.1.3 has a SQL injection vulnerability the background.
• CVE-2022-44298 — CVSS 9.8 (critical): SiteServer CMS 7.1.3 is vulnerable to SQL Injection.
• CVE-2021-42655 — CVSS 8.8 (high): SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.
• CVE-2025-45529 — CVSS 7.1 (high): An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via…
• CVE-2022-30349 — CVSS 6.1 (medium): siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS).
• CVE-2021-42656 — CVSS 5.4 (medium): SiteServer CMS V6.15.51 is affected by a Cross Site Scripting (XSS) vulnerability.
• CVE-2022-44299 — CVSS 4.9 (medium): SiteServerCMS 7.1.3 sscms has a file read vulnerability.
• CVE-2023-2862 — CVSS 3.5 (low): A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file…