CNNVD-202509-4247 Information
CNNVD ID
CNNVD-202509-4247
Related CVE
- CNNVD Published: 2025-09-27
Description (Chinese)
CicadasCMS是中国westboy个人开发者的一款基于 SpringBoot Mybatis SpringSecurity Vue 开发的内容管理框架。 CicadasCMS 1.0版本存在代码注入漏洞，该漏洞源于对文件/system/cms/category/save中参数categoryName的错误操作，可能导致跨站脚本攻击。
Description (English)
CicadasCMS is a content management framework developed by SpringBoot Mybatis SpringSecure, a Chinese personal developer. The CicadasCMS Version 1.0 contains a code-injection loophole, which results from the wrong operation of the Category Name in the file/system/cms/category/save, which may result in a cross-site script attack.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
个人开发者
Published
2025-09-27
Last Modified
2026-02-24
References
https://github.com/devastatingglamour/CVE/blob/main/CicadasCMS-XSS2.md https://vuldb.com/?id.326107 https://vuldb.com/?ctiid.326107 https://vuldb.com/?submit.658064 https://access.redhat.com/security/cve/cve-2025-11068
Share on: