What’s Vulnerable › Vulnerabilities

CVE-2024-50808

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-11-08 · updated 2026-07-05
• Weakness: CWE-94

Description

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in admin_notify.php.

Affected products

• SeaCMS: 13.1

References

• https://github.com/v9d0g/CVEs/blob/main/CVE-2024-50808.md

Get alerted when CVE-2024-50808 or the next vulnerability affects your stack