High severity7.3NVD Advisory· Published Sep 3, 2026· Updated Sep 3, 2026

CVE-2026-85138

Description

A vulnerability was detected in SeaCMS up to 13.6. Affected is the function addslashes of the file weixin/index.php of the component WeChat Module. The manipulation of the argument Content results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

T Chachamaru/Seacms 13.6 Security Advisoriesreferences
Seacms/Seacmsllm-fuzzy
Range: <=13.6

Patches

Vulnerability mechanics

References

github.com/T-Chachamaru/seacms-13.6-security-advisories/blob/a084a3e573240d54860153321df271280daec262/d-003-weixin-xml-entity-sqli.mdnvd
vuldb.com/cve/CVE-2026-85138nvd
vuldb.com/submit/892793nvd
vuldb.com/vuln/398365nvd
vuldb.com/vuln/398365/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000