CVE-2018-17321

An issue was discovered in SeaCMS 6.64. XSS exists in admindatarelate.php via the time or maxHit parameter in a dorandomset action...

CVE-2018-17321

SeaCMS 6.64 is affected by a cross-site scripting (XSS) vulnerability in admin_datarelate.php, exploitable via the time or maxHit parameter in a dorandomset action. The issue stems from input handling in that action, enabling an attacker to inject arbitrary web script or HTML. Affected component:...