5.1
Medium
CVE-2025-4257 A vulnerability, which was classified as problematic, has been found in SeaCMS 13.2
Description
A vulnerability, which was classified as problematic, has been found in SeaCMS 13.2. This issue affects some unknown processing of the file /admin_pay.php. The manipulation of the argument cstatus leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SeaCMS | 13.2 | No fix stated |
References
- VDB-307361 | SeaCMS admin_pay.php cross site scripting vuldb.com
- VDB-307361 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- Submit #562719 | GitHub seacms v13.2 Cross Site Scripting vuldb.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of SeaCMS
The 23 CVEs of SeaCMS →
CVE-2026-85138
A vulnerability was detected in SeaCMS up to 13.6
6.9
Medium
CVE-2026-85137
A security vulnerability has been detected in SeaCMS up to 13.6
6.9
Medium
CVE-2026-82603
A vulnerability was detected in SeaCMS up to 13.6
5.3
Medium
CVE-2026-82602
A security vulnerability has been detected in SeaCMS up to 13.6
6.9
Medium