CVE-2025-2623

Name of the Vulnerable Software and Affected Versions westboy CicadasCMS version 1.0

Description A vulnerability was found in the software, affecting an unknown functionality of the file /system/cms/content/save. The manipulation of the argument title/content/laiyuan leads to cross-site scripting. The attack can be launched remotely.

Recommendations For westboy CicadasCMS version 1.0, as a temporary workaround, consider restricting access to the /system/cms/content/save endpoint until a patch is available. Avoid using the title/content/laiyuan argument in the affected endpoint until the issue is resolved.