PatchTheCVEseeddms vulnerabilities
Recent CVEs affecting seeddms products. 4 tracked.
seeddms has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-05-21. Highest priority: CVE-2025-45752 (score 42/100).
- CVE-2025-45754 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability exists in SeedDMS 6.0.32
- CVE-2025-45752 HIGH 7.2 DOWNGRADE A vulnerability in SeedDMS 6.0.32 allows an attacker with admin privileges to execute arbitrary PHP code by ex
- CVE-2025-25461 MEDIUM 5.4 DOWNGRADE A Stored Cross-Site Scripting (XSS) vulnerability exists in SeedDMS 6.0.29
- CVE-2024-46409 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in SeedDMS v6.0.28 allows attackers to execute arbitrary web
FAQ
How do I fix seeddms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is seeddms being exploited right now?
None of the tracked seeddms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which seeddms CVE should I patch first?
CVE-2025-45752 currently ranks highest (42/100): A vulnerability in SeedDMS 6.0.32 allows an attacker with admin privileges to execute arbitrary PHP code by ex.