CVE-2025-11069: westboy CicadasCMS Add Department save cross site scripting

Published Sep 27, 2025

Updated

A vulnerability was determined in westboy CicadasCMS 1.0. Affected by this issue is some unknown functionality of the file /system/org/save of the component Add Department Handler. This manipulation of the argument Name causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Affected Software

2 affected components

westboy CicadasCMS

westboy CicadasCMS=1.0

Event History

Sep 27, 2025

CVE Published

via MITRE·04:32 PM

Data Sourced

via MITRE·04:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11069?

CVE-2025-11069 has been classified with a severity level indicating potential risk due to cross-site scripting vulnerabilities.

How do I fix CVE-2025-11069?

To fix CVE-2025-11069, it is recommended to implement input validation and sanitization for the affected components of CicadasCMS.

What software is affected by CVE-2025-11069?

CVE-2025-11069 affects westboy CicadasCMS version 1.0.

What kind of vulnerability is CVE-2025-11069?

CVE-2025-11069 is a cross-site scripting (XSS) vulnerability.

Can CVE-2025-11069 be exploited remotely?

Yes, CVE-2025-11069 can be exploited remotely if proper security measures are not in place.