| Title | westboy CicadasCMS 1.0 Cross Site Scripting |
|---|
| Description | In CicadasCMS v1.0, an attacker can construct input that contains malicious script that the browser will execute when another user accesses the affected page, resulting in a cross-site scripting (XSS) attack, due to insufficient input validation and output encoding of the user's content parameters. |
|---|
| Source | ⚠️ https://github.com/devastatingglamour/CVE/blob/main/CicadasCMS-XSS.md |
|---|
| User | xmttz (UID 89920) |
|---|
| Submission | 09/16/2025 10:57 (11 months ago) |
|---|
| Moderation | 09/26/2025 14:08 (10 days later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 300625 [westboy CicadasCMS 1.0 /system/cms/content/save title/content/laiyuan cross site scripting] |
|---|
| Points | 0 |
|---|