Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2020-36932

Seacms 11.1 - 'checkuser' Stored XSS

Description

SeaCMS 11.1 contains a stored cross-site scripting vulnerability in the checkuser parameter of the admin settings page. Attackers can inject malicious JavaScript payloads that will execute in users' browsers when the page is loaded.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Seacms Seacms

  • 0 to ≤ 11.1affected

References