critical9.8
CVE-2022-28118
SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.
Impact
SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sscms | Siteserver Cms | from 7.0.0 through 7.1.2 |
References
- NVD record
- CVE.org record
- https://github.com/Richard-Tang/SSCMS-PluginShell/blob/main/Detail.md
- https://github.com/siteserver/cms
- https://github.com/siteserver/cms/issues/3386
- https://github.com/Richard-Tang/SSCMS-PluginShell/blob/main/Detail.md
- https://github.com/siteserver/cms
- https://github.com/siteserver/cms/issues/3386