SiteServer

Products

ProductCVEsExploitedLatest
SSCMS4–Oct 16, 2026
CMS1–May 24, 2023

Exploited and recent CVEs

  • CVE-2026-111658 Low 3.8 SiteServer SSCMS through 7.4.0 Cross-Site Authorization Bypass via Channels API 0.3%
  • CVE-2026-82486 Medium 5.0 SiteServer SSCMS Agent Installation Workflow access control 0.3%
  • CVE-2026-7435 High 7.2 SSCMS v7.4.0 SQL Injection via stl:sqlContent queryString 0.5%
  • CVE-2026-7429 Medium 4.6 SSCMS v7.4.0 Reflected Cross-Site Scripting via STL Processing 0.2%
  • CVE-2023-2862 Low 3.5 SiteServer CMS search cross site scripting 0.6%