VULNERABILITY INTELLIGENCE

CVE-2025-10662

CVSS score4.7 MEDIUM
EPSS probability0.41%
CISA KEVNot currently listed
Published2025-09-18
Last modified2026-10-19
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Description

A vulnerability has been found in SeaCMS up to 13.3. The impacted element is an unknown function of the file /admin_members.php?ac=editsave. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This affects another injection point than CVE-2025-25513.

Weakness classification

  • cna@vuldb.com: CWE-74
  • nvd@nist.gov: CWE-89

Primary references