5.1
Medium
CVE-2025-4256 A vulnerability classified as problematic was found in SeaCMS 13.2
Description
A vulnerability classified as problematic was found in SeaCMS 13.2. This vulnerability affects unknown code of the file /admin_paylog.php. The manipulation of the argument cstatus leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SeaCMS | 13.2 | No fix stated |
References
- VDB-307360 | SeaCMS admin_paylog.php cross site scripting vuldb.com
- VDB-307360 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- Submit #562718 | GitHub seccms v13.2 Cross Site Scripting vuldb.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of SeaCMS
The 23 CVEs of SeaCMS →
CVE-2026-85138
A vulnerability was detected in SeaCMS up to 13.6
6.9
Medium
CVE-2026-85137
A security vulnerability has been detected in SeaCMS up to 13.6
6.9
Medium
CVE-2026-82603
A vulnerability was detected in SeaCMS up to 13.6
5.3
Medium
CVE-2026-82602
A security vulnerability has been detected in SeaCMS up to 13.6
6.9
Medium