CVE-2021-37270: S-CMS CMS Enterprise Website Construction System

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

There is an unauthorized access vulnerability in the CMS Enterprise Website Construction System 5.0. Attackers can use this vulnerability to directly access the specified background path without logging in to the background to obtain the background administrator authority.

Affected products

• S-CMS CMS Enterprise Website Construction System: version 5.0 only

Published 2021-09-27. Last modified 2026-06-17.