VULNERABILITY INTELLIGENCE

CVE-2021-39426

CVSS score9.8 CRITICAL

EPSS probability0.92%

CISA KEVNot currently listed

Published2022-12-15

Last modified2026-06-17

Description

An issue was discovered in /Upload/admin/admin_notify.php in Seacms 11.4 allows attackers to execute arbitrary php code via the notify1 parameter when the action parameter equals set.