CVE-2025-4256

A vulnerability classified as problematic was found in SeaCMS 13.2. This vulnerability affects unknown code of the file /adminpaylog.php. The manipulation of the argument cstatus leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and...

CVE-2025-4256

creationtimestamp| type| source ---|---|--- 2025-05-05 01:18:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14820 2025-05-05 04:15:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lofj2q2rth2o 2025-05-05 05:50:26+00:00| seen|...

CVE-2025-4256 SeaCMS admin_paylog.php cross site scripting

A vulnerability classified as problematic was found in SeaCMS 13.2. This vulnerability affects unknown code of the file /adminpaylog.php. The manipulation of the argument cstatus leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and...

CVE-2025-4256

CVE-2025-4256 affects SeaCMS 13.2 in the /admin_paylog.php handler. The cstatus parameter, when manipulated, enables cross-site scripting. The flaw is exploitable remotely, and the public exploit has been disclosed. References list SeaCMS 13.2 and the vulnerable file; no vendor-provided patch/ver...