CVE-2022-36226: Siteservercms Project Siteservercms

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

SiteServerCMS 5.X has a Remote-download-Getshell-vulnerability via /SiteServer/Ajax/ajaxOtherService.aspx.

Affected products

• Siteservercms Project Siteservercms: up to and including 5.0.0

Published 2022-08-26. Last modified 2026-06-17.