VULNERABILITY INTELLIGENCE

CVE-2024-50808

CVSS score8.8 HIGH
EPSS probability0.60%
CISA KEVNot currently listed
Published2024-11-08
Last modified2026-07-05
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in admin_notify.php.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-94

Primary references