CVE-2026-82603

Name of the Vulnerable Software and Affected Versions SeaCMS versions prior to 13.7

Description A path traversal issue exists in the Comment Cache component. This occurs due to improper processing of the /member.php?action=del pl endpoint when handling the itype and vid variables. A remote attacker can manipulate these variables to access files or directories outside the intended folder. Path traversal is a technique used to access files and directories that are stored outside the web root folder.

Recommendations Update SeaCMS to version 13.7 or later. Restrict access to the /member.php?action=del pl endpoint to minimize the risk of exploitation.