medium4.7
CVE-2025-11071
A security vulnerability has been detected in SeaCMS 13.3.20250820.
Impact
A security vulnerability has been detected in SeaCMS 13.3.20250820. Impacted is an unknown function of the file /admin_cron.php of the component Cron Task Management Module. The manipulation of the argument resourcefrom/collectID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Seacms | Seacms | Version 13.3.20250820 |