CVE-2020-36932CWE-79

Seacms 11.1 - 'checkuser' Stored XSS

Medium · published January 25, 2026

CVSS v4.0
5.1
EPSS
0%
Percentile
19.2
In the wild
Unconfirmed
What it is

SeaCMS 11.1 contains a stored cross-site scripting vulnerability in the checkuser parameter of the admin settings page. Attackers can inject malicious JavaScript payloads that will execute in users' browsers when the page is loaded.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
EPSS
0.00278 · 19.2th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-01-25T13:04Z
EPSS history
Timeline
  • 25 JAN 13:04Z
    Seacms 11.1 - 'checkuser' Stored XSS
    cvelistv5