CVE-2024-52725: Sem-CMS Semcms

Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days.

SemCms v4.8 was discovered to contain a SQL injection vulnerability. This allows an attacker to execute arbitrary code via the ldgid parameter in the SEMCMS_SeoAndTag.php component.

Affected products

• Sem-CMS Semcms: version 4.8 only

Published 2024-11-20. Last modified 2026-07-05.