Advisories · Technology

SSCMS.

Every CVE that names SSCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-4542 CVE record

CVSS 5.3 Medium

SSCMS layerImage Endpoint LayerImageController.Submit.cs path traversal
- SSCMS
- Path traversal
Not analysed yet 22 Mar 2026
CVE-2026-4234 CVE record

CVSS 5.3 Medium

SSCMS DDL SitesAddController.Submit.cs sql injection
- SSCMS
- Other injection
- SQL injection
Not analysed yet 16 Mar 2026
CVE-2026-4222 CVE record

CVSS 5.1 Medium

SSCMS download PathUtils.RemoveParentPath path traversal
- SSCMS
- Path traversal
Not analysed yet 16 Mar 2026