CVE-2023-46010

CriticalCVSS 9.8

Published: 25/10/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.16%

63th percentile - higher than 63% of all known CVEs

An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the admin_safe.php component.

An attacker can take over the server, steal data, or install malware, leading to full system compromise.

Immediately update SeaCMS to the latest available version and restrict access to the admin panel to trusted IP addresses only.

Original NVD description (English source)

An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the admin_safe.php component.