CVE-2024-40522 — There is a remote code execution vulnerability in SeaCMS 12.9. The vulnerability is caused by phomebak.php writing some variable names passed in without filtering them before writing them into the php — CVE Database · The Intelligence Room