CVE-2018-16343: Seacms

High severity, CVSS 7.2. EPSS: 2.7% chance of exploitation in the next 30 days.

SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf() in include/main.class.php does not block use of $GLOBALS.

Affected products

• Seacms Seacms: version 6.61 only

Published 2018-09-02. Last modified 2026-06-17.