An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin notify.php component.
An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admintemplate.php component.
An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin Weixin.php component.