CVE-2026-82601

Name of the Vulnerable Software and Affected Versions SeaCMS versions prior to 13.7

Description A weakness in the /err.php file allows for remote cross site scripting (XSS), a technique where malicious scripts are injected into trusted websites. This occurs through the manipulation of the errtxt variable.

Recommendations Update SeaCMS to a version later than 13.6. As a temporary workaround, restrict access to the /err.php endpoint to minimize the risk of exploitation.