CVE-2023-50470

Summary

CVE-2023-50470 refers to a cross-site scripting (XSS) vulnerability discovered in the admin_Video.php component of SeaCMS version 12.8. This issue allows malicious actors to inject and execute arbitrary web scripts or HTML code on affected websites. Successful exploitation can lead to information disclosure, session hijacking, or even complete system takeover. Users are strongly urged to update their SeaCMS installation to a patched version to prevent potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.