CVE-2021-37270

9.8 criticalEPSS 1.5%

Critical (9.8) in s-cms cms enterprise website construction system. EPSS 1.5% chance of exploitation in the next 30 days.

There is an unauthorized access vulnerability in the CMS Enterprise Website Construction System 5.0. Attackers can use this vulnerability to directly access the specified background path without logging in to the background to obtain the background administrator authority.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2021-09-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

s-cms:cms_enterprise_website_construction_system

References

https://github.com/purple-WL/S-cms-Unauthorized
https://www.cnvd.org.cn/flaw/show/2815129
https://github.com/purple-WL/S-cms-Unauthorized
https://www.cnvd.org.cn/flaw/show/2815129

Check your stack JSON