CVE-2024-7162: SeaCMS cross site scripting

Published Jul 28, 2024

Updated

A vulnerability, which was classified as problematic, has been found in SeaCMS 12.9/13.0. Affected by this issue is some unknown functionality of the file js/player/dmplayer/admin/post.php?act=setting. The manipulation of the argument yzm leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272576.

Affected Software

2 affected components

SeaCms SeaCms=12.9

SeaCms SeaCms=13.0

Event History

Jul 28, 2024

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-7162?

CVE-2024-7162 is classified as problematic due to its potential for cross-site scripting.

How do I fix CVE-2024-7162?

To mitigate CVE-2024-7162, ensure that input sanitization is implemented in the affected file js/player/dmplayer/admin/post.php.

Which versions of SeaCMS are affected by CVE-2024-7162?

CVE-2024-7162 affects SeaCMS versions 12.9 and 13.0.

What type of vulnerability is CVE-2024-7162?

CVE-2024-7162 is a cross-site scripting vulnerability.

Can CVE-2024-7162 be exploited remotely?

Yes, CVE-2024-7162 can be exploited remotely due to the manipulation of the yzm argument.