CVE-2021-37270

CRITICAL 9.8CVE-2021-37270 · Published 27/09/2021 · updated 17/06/2026

In short

CVE-2021-37270 is a CRITICAL (CVSS 9.8) vulnerability affecting cms enterprise website construction system (s-cms).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cms enterprise website construction system s-cms	`= 5.0`	No fix yet

Description

There is an unauthorized access vulnerability in the CMS Enterprise Website Construction System 5.0. Attackers can use this vulnerability to directly access the specified background path without logging in to the background to obtain the background administrator authority.

References

purple-WL/S-cms-Unauthorized · Third Party Advisory
cnvd.org.cn/flaw/show/2815129 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free