What’s Vulnerable › Vulnerabilities
CVE-2024-54879
- Severity: critical (CVSS 9.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.9% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2025-01-06 · updated 2026-07-05
- Weakness: CWE-281
Description
SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to recharge members indefinitely.
Affected products
- SeaCMS: 13.1
References
Get alerted when CVE-2024-54879 or the next vulnerability affects your stack