An issue was discovered in SeaCMS 6.61. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
CSRF
PHP
Seacms
NVD
GitHub
CVSS 3.0
8.8
EPSS
0.5%
An issue was discovered in SeaCMS 6.61. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
CSRF
PHP
Seacms
NVD
GitHub
CVSS 3.0
8.8
EPSS
0.5%
WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Java
XXE
Wechat Pay
NVD
CVSS 3.0
7.5
EPSS
1.9%