CVE-2019-11518: Sem-CMS Semcms

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in SEMCMS 3.8. SEMCMS_Inquiry.php allows AID[] SQL Injection because the class.phpmailer.php inject_check_sql protection mechanism is incomplete.

Affected products

Published 2019-04-25. Last modified 2026-06-17.