SiteServer vulnerabilities
We track 1 vulnerability in SiteServer products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 30, 2026.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest SiteServer vulnerabilities
- 7.2 High severity
SSCMS: Improper Neutralization of Special Elements used in an SQL Command
SSCMS v7.4.0 contains a SQL injection vulnerability in the stl:sqlContent tag where the queryString attribute is passed directly to database execution without parameterization or sanitization. Attackers can craft encrypted payloads submitted to the /api/stl/ac