CVE-2025-11289: westboy CicadasCMS Template Management TemplateFileServiceImpl.java save cross site scripting
A vulnerability was determined in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. The impacted element is the function Save of the file src/main/java/com/zhiliao/common/template/TemplateFileServiceImpl.java of the component Template Management Page. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11289?
The severity of CVE-2025-11289 is rated as high due to its potential impact on the security of the affected software.
How do I fix CVE-2025-11289?
To fix CVE-2025-11289, update the westboy CicadasCMS to the latest version beyond 2431154dac8d0735e04f1fd2a3c3556668fc8dab.
What component is affected by CVE-2025-11289?
CVE-2025-11289 affects the Template Management Page component, specifically the Save function in TemplateFileServiceImpl.java.
What versions of westboy CicadasCMS are impacted by CVE-2025-11289?
Westboy CicadasCMS versions up to and including 2431154dac8d0735e04f1fd2a3c3556668fc8dab are impacted by CVE-2025-11289.
Is there a workaround for CVE-2025-11289 if I cannot upgrade?
Currently, there are no documented workarounds for CVE-2025-11289, and upgrading is the recommended action.