CVE-2023-50470

MediumCVSS 5.4

Published: 28/12/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

28th percentile - higher than 28% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability exists in the admin_ Video.php component of SeaCMS v12.8. It allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

Risk Assessment

An attacker could hijack an administrator session, steal sensitive data, or spread malware within the organization.

Recommendation

Immediately update SeaCMS to the latest version and implement input filtering in the admin_ Video.php component.

Original NVD description (English source)

A cross-site scripting (XSS) vulnerability in the component admin_ Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.