Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
SscmsSiteserver Cms

10 matches found

CVE
CVE•added 2022/05/24 1:15 p.m.•99 views

CVE-2021-42655

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.

8.8CVSS9AI score0.00298EPSS
CVE
CVE•added 2022/05/24 1:15 p.m.•75 views

CVE-2021-42656

SiteServer CMS V6.15.51 is affected by a Cross Site Scripting (XSS) vulnerability.

5.4CVSS5.2AI score0.0025EPSS
CVE
CVE•added 2022/05/24 1:15 p.m.•64 views

CVE-2021-42654

SiteServer CMS

9.8CVSS9.5AI score0.00897EPSS
CVE
CVE•added 2022/06/02 2:15 p.m.•63 views

CVE-2022-30349

siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS).

6.1CVSS6AI score0.00212EPSS
CVE
CVE•added 2022/05/03 1:15 a.m.•62 views

CVE-2022-28118

SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.

9.8CVSS9.6AI score0.03843EPSS
CVE
CVE•added 2023/05/24 10:15 a.m.•50 views

CVE-2023-2862

A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to launch the attack remotely. The exploit has...

6.1CVSS4.7AI score0.00373EPSS
CVE
CVE•added 2023/01/27 2:15 p.m.•45 views

CVE-2022-44298

SiteServer CMS 7.1.3 is vulnerable to SQL Injection.

9.8CVSS9.5AI score0.00065EPSS
CVE
CVE•added 2023/01/26 9:17 p.m.•39 views

CVE-2022-44297

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background.

9.8CVSS9.7AI score0.00262EPSS
CVE
CVE•added 2023/02/16 10:15 p.m.•33 views

CVE-2022-44299

SiteServerCMS 7.1.3 sscms has a file read vulnerability.

4.9CVSS5AI score0.00153EPSS
CVE
CVE•added 2025/05/27 7:15 p.m.•32 views

CVE-2025-45529

An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via sending a crafted GET request to /cms/templates/templatesAssetsEditor.

7.1CVSS6.8AI score0.00039EPSS