5.3 Medium

CVE-2025-6864 A vulnerability, which was classified as problematic, has been found in SeaCMS up to 13.2

Description

A vulnerability, which was classified as problematic, has been found in SeaCMS up to 13.2. Affected by this issue is some unknown functionality of the file /admin_type.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products and versions

Product	Affected versions	Fixed in
SeaCMS	13.2	No fix stated
SeaCMS	13.1	No fix stated
SeaCMS	13.0	No fix stated

References

VDB-314336 | SeaCMS admin_type.php cross-site request forgery vuldb.com
VDB-314336 | CTI Indicators (IOB, IOC, IOA) vuldb.com
Submit #603562 | SeaCMS https://github.com/seacms-net/CMS/blob/master/SeaCMS_V13.2_install.zip V13.2 CSRF vuldb.com
github.com github.com

Timeline

Published June 29, 2025
Last modified June 30, 2025

The 23 CVEs of SeaCMS →

CVE-2026-85138 A vulnerability was detected in SeaCMS up to 13.6 6.9 Medium CVE-2026-85137 A security vulnerability has been detected in SeaCMS up to 13.6 6.9 Medium CVE-2026-82603 A vulnerability was detected in SeaCMS up to 13.6 5.3 Medium CVE-2026-82602 A security vulnerability has been detected in SeaCMS up to 13.6 6.9 Medium

Track this CVE

CVE-2025-6864 A vulnerability, which was classified as problematic, has been found in SeaCMS up to 13.2

Description

Affected products and versions

References

Timeline

Other CVEs of SeaCMS