Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r3g3-5qcf-wfvp

Опубликовано: 08 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in admin_notify.php.

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in admin_notify.php.

EPSS

Процентиль: 44%
0.00217
Низкий

8.8 High

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 8.8
nvd
около 1 года назад

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in admin_notify.php.

EPSS

Процентиль: 44%
0.00217
Низкий

8.8 High

CVSS3

Дефекты

CWE-94