← Database

CVE-2025-11071

MEDIUM CVSS: 4.7 Published: 2025-09-27 Modified: 2026-06-17

Description

A security vulnerability has been detected in SeaCMS 13.3.20250820. Impacted is an unknown function of the file /admin_cron.php of the component Cron Task Management Module. The manipulation of the argument resourcefrom/collectID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

Affected Platforms

Seacms Seacms

Weakness Type

CWE-74, CWE-89

References