Skip to content
OpenAdvisories

Vendor

SiteServer

6 known vulnerabilities.

Products

SSCMS 5 CMS 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.0
    CVE-2026-82486

    SiteServer SSCMS Agent Installation Workflow access control

    A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of the argument SecurityKey results in improper access controls. Remote exploitat…

    SiteServer SSCMS
  • Medium 4.6
    CVE-2026-7429

    SSCMS v7.4.0 Reflected Cross-Site Scripting via STL Processing

    SSCMS v7.4.0 contains a reflected cross-site scripting vulnerability in the STL processing endpoint that allows attackers to execute arbitrary JavaScript by crafting malicious STL template payloads that are decrypted and returned without proper sanitization. …

    SiteServer SSCMS