Description
A cross-site scripting (XSS) vulnerability in the component admin_collect_news.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the siteurl parameter.
Medium · 6.1
CVE-2024-44920
EUVD-2024-41141GHSA-cpvq-fvgw-wq2f
A cross-site scripting (XSS) vulnerability in the component admin_collect_news.php of SeaCMS v12.9 allows attackers to execute arbitrary we…
Published Sep 3, 2024 · Updated Sep 3, 2024 · Assigned by mitre