CVE-2022-28118

SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-05-03

Last modified

2026-07-09

Affected products

• Siteserver Cms (Sscms)

References

• https://github.com/Richard-Tang/SSCMS-PluginShell/blob/main/Detail.md
• https://github.com/siteserver/cms
• https://github.com/siteserver/cms/issues/3386