6.9
Medium
CVE-2026-85138 A vulnerability was detected in SeaCMS up to 13.6
Description
A vulnerability was detected in SeaCMS up to 13.6. Affected is the function addslashes of the file weixin/index.php of the component WeChat Module. The manipulation of the argument Content results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.
Affected products and versions
References
- VDB-398365 | SeaCMS WeChat index.php addslashes sql injection vuldb.com
- VDB-398365 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- CVE-2026-85138 | CVE Analysis and Report vuldb.com
- Submit #892793 | SeaCMS 13.6 SQL Injection vuldb.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of SeaCMS
The 23 CVEs of SeaCMS →
CVE-2026-85137
A security vulnerability has been detected in SeaCMS up to 13.6
6.9
Medium
CVE-2026-82603
A vulnerability was detected in SeaCMS up to 13.6
5.3
Medium
CVE-2026-82602
A security vulnerability has been detected in SeaCMS up to 13.6
6.9
Medium
CVE-2026-82601
A weakness has been identified in SeaCMS up to 13.6
5.3
Medium