SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_smtp.php.