critical9.8
CVE-2025-44071
SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component phomebak.php.
Impact
SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component phomebak.php. This vulnerability allows attackers to execute arbitrary code via a crafted request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Seacms | Seacms | Version 13.3 |