Skip to content
OpenAdvisories

Vendor

SiteServer

6 known vulnerabilities.

Products

SSCMS 5 CMS 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-124575

    SiteServer SSCMS Admin-Login CAPTCHA LoginController.Submit.cs LoginController.Submit excessive authentication

    A vulnerability was identified in SiteServer SSCMS up to 7.1.3/7.2.1/7.4.0. This issue affects the function LoginController.Submit of the file src/SSCMS.Web/Controllers/Admin/LoginController.Submit.cs of the component Admin-Login CAPTCHA. Such manipulation of…

    SiteServer SSCMS
  • Low 3.8
    CVE-2026-111658

    SiteServer SSCMS through 7.4.0 Cross-Site Authorization Bypass via Channels API

    SiteServer SSCMS through 7.4.0 contains an authorization bypass vulnerability in ChannelsController that allows site-scoped administrators to access other sites' channels by supplying foreign channel IDs. Attackers with Channels permission on one site can rea…

    SiteServer SSCMS
  • Low 3.5
    CVE-2023-2862

    SiteServer CMS search cross site scripting

    A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to lau…

    SiteServer CMS SSCMS NuGet