CVE-2022-28118: Sscms Siteserver CMS

Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days.

SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.

Affected products

• Sscms Siteserver CMS: from 7.0.0, up to and including 7.1.2

Published 2022-05-03. Last modified 2026-07-09.