# SeaCMS.

Every CVE that names SeaCMS among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [SeaCMS 8.7 SQL Injection via comment/api/index.php rlist Parameter](https://agentprime.io/advisories/CVE-2019-25778.md)
  `CVE-2019-25778` · CVE record: SeaCMS SeaCMS · CVSS 8.8 High · Not analysed yet · Published 22 Oct 2026 · Tags: SQL injection
- [SeaCMS WeChat index.php addslashes sql injection](https://agentprime.io/advisories/CVE-2026-85138.md)
  `CVE-2026-85138` · CVE record: SeaCMS · CVSS 6.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Other injection, SQL injection
- [SeaCMS Locoy Collector seacms_locoy_news.php parseIf code injection](https://agentprime.io/advisories/CVE-2026-85137.md)
  `CVE-2026-85137` · CVE record: SeaCMS · CVSS 6.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Other injection, Code injection
- [SeaCMS Comment Cache member.php del_pl path traversal](https://agentprime.io/advisories/CVE-2026-82603.md)
  `CVE-2026-82603` · CVE record: SeaCMS · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Path traversal
- [SeaCMS ass.php authorization](https://agentprime.io/advisories/CVE-2026-82602.md)
  `CVE-2026-82602` · CVE record: SeaCMS · CVSS 6.9 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [SeaCMS err.php cross site scripting](https://agentprime.io/advisories/CVE-2026-82601.md)
  `CVE-2026-82601` · CVE record: SeaCMS · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SeaCMS zyapi.php sql injection](https://agentprime.io/advisories/CVE-2026-82600.md)
  `CVE-2026-82600` · CVE record: SeaCMS · CVSS 6.9 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Other injection, SQL injection
- [SeaCMS Avatar Upload member.php unlink path traversal](https://agentprime.io/advisories/CVE-2026-82599.md)
  `CVE-2026-82599` · CVE record: SeaCMS · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Path traversal
- [SeaCMS Template search.php parseIf code injection](https://agentprime.io/advisories/CVE-2026-82598.md)
  `CVE-2026-82598` · CVE record: SeaCMS · CVSS 6.9 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Other injection, Code injection
- [Seacms 11.1 - 'checkuser' Stored XSS](https://agentprime.io/advisories/CVE-2020-36932.md)
  `CVE-2020-36932` · CVE record: Seacms Seacms · CVSS 5.1 Medium · Not analysed yet · Published 25 Jan 2026 · Tags: Cross-site scripting (XSS)
- [SeaCMS admin_video.php sql injection](https://agentprime.io/advisories/CVE-2025-15003.md)
  `CVE-2025-15003` · CVE record: SeaCMS · CVSS 5.1 Medium · Not analysed yet · Published 21 Dec 2025 · Tags: Other injection, SQL injection
- [SeaCMS mysqli.class.php sql injection](https://agentprime.io/advisories/CVE-2025-15002.md)
  `CVE-2025-15002` · CVE record: SeaCMS · CVSS 6.9 Medium · Not analysed yet · Published 21 Dec 2025 · Tags: Other injection, SQL injection
- [SeaCMS Cron Task Management admin_cron.php sql injection](https://agentprime.io/advisories/CVE-2025-11071.md)
  `CVE-2025-11071` · CVE record: SeaCMS · CVSS 5.1 Medium · Not analysed yet · Published 27 Sept 2025 · Tags: Other injection, SQL injection
- [SeaCMS admin_members.php sql injection](https://agentprime.io/advisories/CVE-2025-10662.md)
  `CVE-2025-10662` · CVE record: SeaCMS · CVSS 5.1 Medium · Not analysed yet · Published 18 Sept 2025 · Tags: Other injection, SQL injection
- [SeaCMS admin_type.php cross-site request forgery](https://agentprime.io/advisories/CVE-2025-6864.md)
  `CVE-2025-6864` · CVE record: SeaCMS · CVSS 5.3 Medium · Not analysed yet · Published 29 Jun 2025 · Tags: Cross-site request forgery (CSRF), Broken access control
- [SeaCMS admin_pay.php cross site scripting](https://agentprime.io/advisories/CVE-2025-4257.md)
  `CVE-2025-4257` · CVE record: SeaCMS · CVSS 5.1 Medium · Not analysed yet · Published 5 May 2025 · Tags: Cross-site scripting (XSS), Code injection
- [SeaCMS admin_paylog.php cross site scripting](https://agentprime.io/advisories/CVE-2025-4256.md)
  `CVE-2025-4256` · CVE record: SeaCMS · CVSS 5.1 Medium · Not analysed yet · Published 5 May 2025 · Tags: Cross-site scripting (XSS), Code injection
- [SeaCMS admin_topic.php sql injection](https://agentprime.io/advisories/CVE-2025-3797.md)
  `CVE-2025-3797` · CVE record: SeaCMS · CVSS 5.1 Medium · Not analysed yet · Published 19 Apr 2025 · Tags: Other injection, SQL injection
- [SeaCMS admin_link.php sql injection](https://agentprime.io/advisories/CVE-2025-3792.md)
  `CVE-2025-3792` · CVE record: SeaCMS · CVSS 5.1 Medium · Not analysed yet · Published 18 Apr 2025 · Tags: Other injection, SQL injection
- [SeaCMS index.php cross site scripting](https://agentprime.io/advisories/CVE-2024-7163.md)
  `CVE-2024-7163` · CVE record: SeaCMS · CVSS 5.3 Medium · Not analysed yet · Published 28 Jul 2024 · Tags: Cross-site scripting (XSS)
- [SeaCMS cross site scripting](https://agentprime.io/advisories/CVE-2024-7162.md)
  `CVE-2024-7162` · CVE record: SeaCMS · CVSS 5.3 Medium · Not analysed yet · Published 28 Jul 2024 · Tags: Cross-site scripting (XSS)
- [SeaCMS Password Change cross-site request forgery](https://agentprime.io/advisories/CVE-2024-7161.md)
  `CVE-2024-7161` · CVE record: SeaCMS · CVSS 6.9 Medium · Not analysed yet · Published 28 Jul 2024 · Tags: Cross-site request forgery (CSRF)
- [SeaCMS sql injection](https://agentprime.io/advisories/CVE-2024-6416.md)
  `CVE-2024-6416` · CVE record: SeaCMS · CVSS 5.3 Medium · Not analysed yet · Published 30 Jun 2024 · Tags: SQL injection
- [SeaCMS Picture Upload member.php denial of service](https://agentprime.io/advisories/CVE-2023-2926.md)
  `CVE-2023-2926` · CVE record: SeaCMS · CVSS 5.4 Medium · Not analysed yet · Published 27 May 2023 · Tags: Denial of service
- [SeaCMS Picture Management config.ftp.php deserialization](https://agentprime.io/advisories/CVE-2023-0960.md)
  `CVE-2023-0960` · CVE record: SeaCMS · CVSS 4.7 Medium · Not analysed yet · Published 22 Feb 2023 · Tags: Insecure deserialization

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=seacms>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/seacms/>. Everything for agents: <https://agentprime.io/llms.txt>.