CVE-2025-4256 | SeaCMS 13.2 /admin_paylog.php cstatus cross site scripting (Issue 25)

A vulnerability classified as problematic was found in SeaCMS 13.2. This vulnerability affects unknown code of the file /admin_paylog.php. The manipulation of the argument cstatus leads to cross site scripting.

This vulnerability was named CVE-2025-4256. The attack can be initiated remotely. Furthermore, there is an exploit available.