CVE-2025-50592: Improper Neutralization of Input During Web Page Generation

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player...

CVE-2025-50592

The seacms content management system, primarily used for video-on-demand resources, is vulnerable to a Cross Site Scripting (XSS) issue in versions prior to 13.2 . The vulnerability is located in the vid parameter within the path Upload/js/player/dmplayer/player. This flaw could allow an attacker...