CVE-2026-4542 | SSCMS 4.7.0 layerImage Endpoint LayerImageController.Submit.cs filePaths path traversal

A vulnerability was found in SSCMS 4.7.0. It has been declared as critical. The affected element is an unknown function of the file LayerImageController.Submit.cs of the component layerImage Endpoint. Such manipulation of the argument filePaths leads to path traversal.

This vulnerability is listed as CVE-2026-4542. The attack may be performed from remote. In addition, an exploit is available.