CVE-2024-50808

CVSS 8.8 HIGHEPSS 0.6%CWE-94

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 8.8EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

08 nov 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in admin_notify.php.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

n/a · n/a

Referencias

http://seacms.com https://github.com/v9d0g/CVEs/blob/main/CVE-2024-50808.md