Skip to main content

SSCMS CVE-2026-7429

| EUVD-2026-26417 LOW
Cross-site Scripting (XSS) (CWE-79)
2026-04-30 VulnCheck
XSS Sscms
2.1
CVSS 4.0 · NVD

Severity by source

NVD PRIMARY
2.1 LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
P
Scope
X

Lifecycle Timeline

6
Severity Changed
Apr 30, 2026 - 20:22 NVD
MEDIUM LOW
CVSS changed
Apr 30, 2026 - 20:22 NVD
4.6 (MEDIUM) 2.1 (LOW)
Analysis Generated
Apr 30, 2026 - 20:15 vuln.today
EUVD ID Assigned
Apr 30, 2026 - 20:00 euvd
EUVD-2026-26417
Analysis Generated
Apr 30, 2026 - 20:00 vuln.today
CVE Published
Apr 30, 2026 - 19:45 nvd
LOW 2.1

DescriptionCVE.org

SSCMS v7.4.0 contains a reflected cross-site scripting vulnerability in the STL processing endpoint that allows attackers to execute arbitrary JavaScript by crafting malicious STL template payloads that are decrypted and returned without proper sanitization. Attackers can exploit improper output encoding in the /api/stl/actions/dynamic endpoint to inject executable JavaScript into JSON responses, leading to session hijacking, phishing attacks, and unauthorized actions performed on behalf of users.

AnalysisAI

Reflected cross-site scripting in SSCMS v7.4.0 allows authenticated attackers to inject arbitrary JavaScript through crafted STL template payloads in the /api/stl/actions/dynamic endpoint. The vulnerability arises from improper output encoding when decrypted STL templates are returned in JSON responses, enabling session hijacking, credential theft via phishing, and unauthorized user actions. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Recon
Authenticate to SSCMS as valid user
Delivery
Craft malicious STL template with JavaScript payload
Exploit
Submit payload to /api/stl/actions/dynamic endpoint
Install
Server decrypts template and returns unencoded response
C2
Trick victim into triggering payload via link or form
Execute
JavaScript executes in victim's browser
Impact
Steal session token or perform unauthorized action
Sign in to reveal

Vulnerability AssessmentAI

Exploitation An attacker must have valid authentication credentials to access the /api/stl/actions/dynamic endpoint (PR:L in CVSS vector). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment CVSS 4.6 (medium) with network vector (AV:N), low complexity (AC:L), and low authentication barrier (PR:L) indicates the vulnerability is accessible to any authenticated user without special configuration. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An authenticated attacker crafts a malicious STL template payload containing JavaScript (e.g., `<img src=x onerror=alert('XSS')>`) and submits it to the /api/stl/actions/dynamic endpoint. The server decrypts the payload and returns it in a JSON response without encoding. …
Remediation Apply output encoding (HTML entity encoding or JSON-safe escaping) to all decrypted STL template content before returning it in JSON responses from the /api/stl/actions/dynamic endpoint. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

Share

CVE-2026-7429 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy