CVE-2025-11071: Seacms

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

A security vulnerability has been detected in SeaCMS 13.3.20250820. Impacted is an unknown function of the file /admin_cron.php of the component Cron Task Management Module. The manipulation of the argument resourcefrom/collectID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

Affected products

• Seacms Seacms: version 13.3.20250820 only

Published 2025-09-27. Last modified 2026-06-17.