CVE-2025-25520

Summary

CVE-2025-25520 is a newly identified vulnerability affecting Seacms version 13.3 and below. This issue involves SQL Injection in the admin_pay.php file, enabling unauthorized users to manipulate or extract sensitive data from the database. Successful exploitation of this vulnerability could result in unintended modifications to financial transactions or complete system compromise. It is highly recommended that users upgrade to the latest Seacms version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.