CVE-2025-52237

An issue in the component /stl/actions/download?filePath of SSCMS v7.3.1 allows attackers to execute a directory traversal.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2025-08-05

Last modified

2026-07-05

Weaknesses

CWE-27

Affected products

• Sscms (Sscms)

References

• https://gist.github.com/CTRLCCT/c9b5aab78a179a2d92a41889a588c933