66 matches found
CVE-2026-11591
The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 13.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level...
EUVD-2025-5337
Malicious code in bioql PyPI...
EUVD-2025-5334
Malicious code in bioql PyPI...
CVE-2025-10662 SeaCMS admin_members.php sql injection
A vulnerability has been found in SeaCMS up to 13.3. The impacted element is an unknown function of the file /adminmembers.php?ac=editsave. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be use...
Linux Distros Unpatched Vulnerability : CVE-2020-13300
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab CE/EE version 13.3 prior to 13.3.4 was vulnerable to an OAuth authorization scope change without user consent in the middle of the authorization flow...
PT-2025-19959 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.3 Description: A SQL injection issue was discovered in the admin comment news.php component. Recommendations: For SeaCMS version 13.3, update to a version that fixes the SQL injection vulnerability in the admin comment...
CVE-2025-44073
SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admincommentnews.php...
CVE-2025-44072
SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component adminmanager.php...
CVE-2025-44074
SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admintopic.php...
PT-2025-19806 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.3 Description: A SQL injection issue was discovered in the admin topic.php component. Recommendations: For SeaCMS version 13.3, update to a version that fixes the SQL injection vulnerability in the admin topic.php component...
PT-2025-19805 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.3 Description: A SQL injection issue was discovered in the admin manager.php component. Recommendations: For SeaCMS version 13.3, update to a version that fixes the SQL injection vulnerability in the admin manager.php...
CVE-2025-44074
SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admintopic.php...
SeaCMS 安全漏洞
SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS v13.3, which stems from improper handling of the phomebak.php component and could lead to remo...
CVE-2025-29647
SeaCMS v13.3 has a SQL injection vulnerability in the component admintempvideo.php...
CVE-2025-29647
SeaCMS v13.3 has a SQL injection vulnerability in the component admintempvideo.php...
CVE-2025-29647
SeaCMS v13.3 contains a SQL injection vulnerability in the admin_tempvideo.php component. Root cause: improper handling of input in that PHP file leads to unauthenticated, remote exploitation with full impact on confidentiality, integrity, and availability (per CVSS 3.1 score 9.8). Exploitation a...
CVE-2025-29647
SeaCMS v13.3 has a SQL injection vulnerability in the component admintempvideo.php...
CVE-2025-25802
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminip.php...