CVE-2020-36932

Medium CVSS: 5.1

SeaCMS 11.1 contains a stored cross-site scripting vulnerability in the checkuser parameter of the admin settings page. Attackers can inject malicious JavaScript payloads that will execute in users' browsers when the page is loaded.

Vendor

Seacms

Product

Seacms

CWE

CWE-79

Yayın Tarihi

2026-01-25 13:15:59

Güncelleme

2026-02-02 16:16:14

Source Identifier

disclosure@vulncheck.com

KEV Date Added

Kategoriler

CWE-79 Seacms MEDIUM Seacms 2026

Referanslar

https://www.exploit-db.com/exploits/49251 https://www.seacms.net/ https://www.vulncheck.com/advisories/seacms-checkuser-stored-xss

Benzer Kayıtlar

Medium

CVE-2025-15003

A vulnerability was found in SeaCMS up to 13.3. The impacted element is an unknown function of the file admin_video.php.…

Medium

CVE-2025-15002

A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/d…

Medium

CVE-2025-60449

An information disclosure vulnerability has been discovered in SeaCMS 13.1. The vulnerability exists in the admin_safe.p…

Medium

CVE-2025-11071

A security vulnerability has been detected in SeaCMS 13.3.20250820. Impacted is an unknown function of the file /admin_c…

Medium

CVE-2025-10662

A vulnerability has been found in SeaCMS up to 13.3. The impacted element is an unknown function of the file /admin_memb…

Medium

CVE-2025-50592

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player.