SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_comment_news.php.