SSCMS vulnerabilities

1 known vulnerability in SSCMS from SiteServer. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  SSCMS: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-7435Apr 30, 2026SiteServer

  SSCMS v7.4.0 contains a SQL injection vulnerability in the stl:sqlContent tag where the queryString attribute is passed directly to database execution without parameterization or sanitization. Attackers can craft encrypted payloads submitted to the /api/stl/ac