SeaCMS vulnerabilities
CVEs whose affected-version data names the SeaCMS package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2019-25778High· 8.2SeaCMS 8.7 SQL Injection via comment/api/index.php rlist Parameter
SeaCMS through 8.7 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by injecting SQL through the rlist[] array parameter. Attackers can send GET requests to /comment/api/…
▾ TwilightSeaCMS · SeaCMSvia CVEORG
CVE-2025-15002High· 7.3A vulnerability has been found in SeaCMS up to 13.3
A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/limit leads to sql injection. The attack …
▾ Twilightseacms · seacmsEPSS 0.45%via NVD