CVE-2024-50808

PoC —

CVSS 3.1

8.8 high

EPSS

<1%p47

Published

Nov 8, 2024 (Nov 8, 2024)

Modified

Jul 5, 2026

Description

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in admin_notify.php.

Vendors: seacms
Products: seacms
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.