CVE-2025-52237: Sscms

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue in the component /stl/actions/download?filePath of SSCMS v7.3.1 allows attackers to execute a directory traversal.

Affected products

• Sscms Sscms: version 7.3.1 only

Published 2025-08-05. Last modified 2026-07-05.