CVE-2024-50808

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...

CVE-2024-50808

creationtimestamp| type| source ---|---|--- 2024-11-08 21:08:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113449377391121331 2024-11-08 23:03:42+00:00| seen| https://t.me/cvedetector/10222...

CVE-2024-50808

SeaCms 13.1 is vulnerable to code injection in the backend user module’s notification flow (member message notification) due to unsafe handling of the notify variable in admin_notify.php. The concrete affected component is the notification module within the backend user area; root cause is improp...

CVE-2024-50808

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...