Skip to content
OpenAdvisories

Package · NuGet

SSCMS

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Low 3.5
    CVE-2023-2862

    SiteServer CMS search cross site scripting

    A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to lau…

    SiteServer CMS SSCMS NuGet
  • Medium 6.1
    CVE-2022-30349

    Cross site scripting in SSCMS

    siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS).

    SSCMS NuGet
  • Medium 5.4
    CVE-2021-42656

    Cross site scripting in SiteServer CMS

    SiteServer CMS V6.15.51 is affected by a Cross Site Scripting (XSS) vulnerability.

    SSCMS NuGet
  • High 8.8
    CVE-2021-42655

    SQL injection in SiteServer CMS

    SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.

    SSCMS NuGet
  • High 7.2
    CVE-2019-11401

    SiteServer CMS RCE via unsafe file upload

    A issue was discovered in SiteServer CMS 6.9.0. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extension .aassp, which is converted to .asp because the "as" substring is deleted.

    SSCMS NuGet