CVE-2024-54879

Critical · CVSS 9.1

SeaCMS — Incorrect Access Control / Logic Flaw - Unauthorized Unlimited Member Recharge

CVSS: 9.1; nvd
EPSS: —
KEV: No
Class: other; CWE-281

Description

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to recharge members indefinitely.

Search profile — drives PoC discovery

Symbols rechargemember rechargelogic flawaccess controlrecharge membersuser privilegepayment logic

Keywords CVE-2024-54879SeaCMSSeaCMS V13.1incorrect access controlmember rechargelogic flawunlimited rechargeCWE-281

Versions: V13.1

Ranked PoCs (1) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

ailenye/CVE-2024-54879 needs review

recent activity

gh_search

★ 0

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

References

https://blog.csdn.net/weixin_46686336/article/details/144797242

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-06T00:30:39.000Z