CVEvulnerability

CVE-2024-50808

8.8 HIGH Published 2024-11-08 Modified 2026-07-05 Official page ↗
Status
Modified
Published
2024-11-08
Last modified
2026-07-05
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-94

Description

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in admin_notify.php.

Affected configurations

• seacms seacms 13.1

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References