Advisories · Technology

westboy CicadasCMS.

Every CVE that names westboy CicadasCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-108791 CVE record

CVSS 5.3 Medium

westboy CicadasCMS Template Management input TemplateController.input path traversal
- westboy CicadasCMS
- Path traversal
Not analysed yet 12 Oct 2026
CVE-2026-108790 CVE record

CVSS 5.1 Medium

westboy CicadasCMS Backend Template Editor save TemplateController.save path traversal
- westboy CicadasCMS
- Path traversal
Not analysed yet 12 Oct 2026
CVE-2026-10529 CVE record

CVSS 4.8 Medium

westboy CicadasCMS Task Scheduling Management ScheduleJobController.java cross site scripting
- westboy CicadasCMS
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 2 Jun 2026
CVE-2026-10153 CVE record

CVSS 5.3 Medium

westboy CicadasCMS AbstractCacheManager.java search cross site scripting
- westboy CicadasCMS
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 30 May 2026
CVE-2025-11289 CVE record

CVSS 4.8 Medium

westboy CicadasCMS Template Management TemplateFileServiceImpl.java save cross site scripting
- westboy CicadasCMS
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 5 Oct 2025
CVE-2025-11069 CVE record

CVSS 4.8 Medium

westboy CicadasCMS Add Department save cross site scripting
- westboy CicadasCMS
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 27 Sept 2025
CVE-2025-11068 CVE record

CVSS 4.8 Medium

westboy CicadasCMS save cross site scripting
- westboy CicadasCMS
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 27 Sept 2025
CVE-2025-3816 CVE record

CVSS 5.1 Medium

westboy CicadasCMS Scheduled Task save os command injection
- westboy CicadasCMS
- Command injection
Not analysed yet 19 Apr 2025
CVE-2025-3585 CVE record

CVSS 5.3 Medium

westboy CicadasCMS JSP Parser upload unrestricted upload
- westboy CicadasCMS
- Broken access control
- Unrestricted file upload
Not analysed yet 14 Apr 2025
CVE-2025-2625 CVE record

CVSS 5.3 Medium

westboy CicadasCMS page sql injection
- westboy CicadasCMS
- Other injection
- SQL injection
Not analysed yet 22 Mar 2025
CVE-2025-2624 CVE record

CVSS 5.3 Medium

westboy CicadasCMS save sql injection
- westboy CicadasCMS
- Other injection
- SQL injection
Not analysed yet 22 Mar 2025
CVE-2025-2623 CVE record

CVSS 5.1 Medium

westboy CicadasCMS save cross site scripting
- westboy CicadasCMS
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 22 Mar 2025
CVE-2025-1556 CVE record

CVSS 5.1 Medium

westboy CicadasCMS Template Management system deserialization
- westboy CicadasCMS
- Insecure deserialization
- CWE-20
Not analysed yet 22 Feb 2025