CVE-2025-2623: westboy CicadasCMS save cross site scripting

Published Mar 22, 2025

Updated

A vulnerability was found in westboy CicadasCMS 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /system/cms/content/save. The manipulation of the argument title/content/laiyuan leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

westboy CicadasCMS

westboy CicadasCMS=1.0

Event History

Mar 22, 2025

CVE Published

via MITRE·05:31 PM

Data Sourced

via MITRE·05:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-2623?

CVE-2025-2623 has been declared as problematic, indicating a notable level of risk associated with the vulnerability.

How does CVE-2025-2623 affect CicadasCMS?

CVE-2025-2623 affects the save functionality in the file /system/cms/content/save, leading to potential cross-site scripting vulnerabilities.

What is the impact of exploiting CVE-2025-2623?

Exploitation of CVE-2025-2623 can allow attackers to inject malicious scripts into a web application, leading to data theft or session hijacking.

How do I mitigate CVE-2025-2623?

To mitigate CVE-2025-2623, it's essential to validate and sanitize user inputs in the affected save functionality of CicadasCMS.

Is there an official patch for CVE-2025-2623?

As of now, there is no specific patch announced for CVE-2025-2623, so users should implement immediate security measures to protect their applications.