Description (CNA)
SeaCMS 11.1 contains a stored cross-site scripting vulnerability in the checkuser parameter of the admin settings page. Attackers can inject malicious JavaScript payloads that will execute in users' browsers when the page is loaded.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Seacms / Seacms | affected 0 through 11.1 |
CWE
CWE-79
References
- https://www.exploit-db.com/exploits/49251
- https://www.seacms.net/
- https://www.vulncheck.com/advisories/seacms-checkuser-stored-xss
ADP enrichment
No English description supplied.
No references supplied.