What’s Vulnerable › Vulnerabilities

CVE-2020-36932: Seacms 11.1 - 'checkuser' Stored XSS

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-01-25 · updated 2026-06-17
• Weakness: CWE-79

Description

SeaCMS 11.1 contains a stored cross-site scripting vulnerability in the checkuser parameter of the admin settings page. Attackers can inject malicious JavaScript payloads that will execute in users' browsers when the page is loaded.

Affected products

• SeaCMS: 11.1

References

• https://www.exploit-db.com/exploits/49251
• https://www.seacms.net/
• https://www.vulncheck.com/advisories/seacms-checkuser-stored-xss

Get alerted when CVE-2020-36932 or the next vulnerability affects your stack