A vulnerability was detected in SeaCMS up to 13.6. Affected is the function addslashes of the file weixin/index.php of the component WeChat Module. The manipulation of the argument Content results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.

A SQL injection vulnerability has been identified in SeaCMS up to version 13.6, specifically within the WeChat Module component. The vulnerability exists in the addslashes function located in the weixin/index.php file. Attackers can manipulate the 'Content' argument to perform SQL injection attacks remotely. A public exploit is already available, increasing the risk of active exploitation. The vulnerability affects all SeaCMS installations up to version 13.6 using the WeChat integration module. Due to the public availability of the exploit and the remote attack vector, this issue is considered high severity. Organizations using SeaCMS with the WeChat module enabled should apply patches or mitigations immediately.