| 제목 | CicadasCMS 1.0 Code Injection |
|---|
| 설명 | CicadasCMS uses the Beetl template engine to process front-end templates, but it lacks strict filtering and escaping of user-controlled input in several interfaces. HTML files uploaded or edited by users are saved to the template directory by the system. When the application accesses the HTML file, the framework uses the Beetl engine to render it. |
|---|
| 원천 | ⚠️ https://gitee.com/westboy/CicadasCMS/issues/IDBPU6 |
|---|
| 사용자 | formanagain (UID 93347) |
|---|
| 제출 | 2025. 12. 09. AM 07:22 (10 개월 ago) |
|---|
| 모더레이션 | 2025. 12. 13. AM 02:59 (4 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 327170 [westboy CicadasCMS 까지 2431154dac8d0735e04f1fd2a3c3556668fc8dab Template Management Page TemplateFileServiceImpl.java save 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 0 |
|---|