CVE-2018-20018: S-CMS

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

S-CMS V3.0 has SQL injection via the S_id parameter, as demonstrated by the /1/?type=productinfo&S_id=140 URI.

Affected products

• S-CMS S-CMS: version 3.0 only

Published 2018-12-10. Last modified 2026-06-17.