CVE-2023-37124

Summary

CVE-2023-37124 is a stored cross-site scripting (XSS) vulnerability discovered in the Site Setup module of SEACMS v12.1. This issue permits attackers to inject malicious scripts or HTML code into a website, potentially stealing sensitive user information or taking control of user sessions. The vulnerability arises due to insufficient input validation, enabling an attacker to manipulate data stored on the server. Successful exploitation can result in unintended execution of arbitrary code in the context of an affected user. Users are strongly advised to update their SEACMS installation to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.