PatchTheCVEsucms vulnerabilities and fixes
Recent CVEs affecting sucms, with upgrade or downgrade steps. 3 tracked.
sucms has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-02-27. Highest priority: CVE-2025-25759 (score 44/100).
- CVE-2025-25760 HIGH 7.5 DOWNGRADE A Server-Side Request Forgery (SSRF) in the component admin_webgather.php of SUCMS v1.0 allows attackers to ac
- CVE-2025-25759 HIGH 7.5 DOWNGRADE An issue in the component admin_template.php of SUCMS v1.0 allows attackers to execute a directory traversal a
- CVE-2024-13194 MEDIUM 6.3 DOWNGRADE A vulnerability was found in Sucms 1.0 and classified as critical
FAQ
How do I fix sucms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sucms being exploited right now?
None of the tracked sucms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sucms CVE should I patch first?
CVE-2025-25759 currently ranks highest (44/100): An issue in the component admin_template.php of SUCMS v1.0 allows attackers to execute a directory traversal a.