Siteserver Cms vulnerabilities

• siteserver sscms SiteServer SSCMS through 7.4.0 Cross-Site Authorization Bypass via Channels API CVE-2026-111658 5.1 MediumOctober 16, 2026
• siteserver sscms SiteServer SSCMS Agent Installation Workflow access control CVE-2026-82486 2.3 LowAugust 30, 2026
• siteserver sscms SSCMS v7.4.0 SQL Injection via stl:sqlContent queryString CVE-2026-7435 8.6 HighApril 30, 2026
• siteserver sscms SSCMS v7.4.0 Reflected Cross-Site Scripting via STL Processing CVE-2026-7429 2.1 LowApril 30, 2026
• siteserver sscms SSCMS layerImage Endpoint LayerImageController.Submit.cs path traversal CVE-2026-4542 5.3 MediumMarch 22, 2026
• siteserver sscms SSCMS DDL SitesAddController.Submit.cs sql injection CVE-2026-4234 5.3 MediumMarch 16, 2026
• siteserver sscms SSCMS download PathUtils.RemoveParentPath path traversal CVE-2026-4222 5.1 MediumMarch 16, 2026
• siteserver cms, sscms siteserver cms +1 more SiteServer CMS search cross site scripting CVE-2023-2862 3.5 LowMay 24, 2023
• siteserver cms SiteServer CMS RCE via unsafe file upload CVE-2019-11401 Fix available 7.2 HighApril 21, 2019