CVE-2025-3816: westboy CicadasCMS Scheduled Task save os command injection
Published Apr 19, 2025
·Updated
A vulnerability classified as critical was found in westboy CicadasCMS 2.0. This vulnerability affects unknown code of the file /system/schedule/save of the component Scheduled Task Handler. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
westboy CicadasCMS
westboy CicadasCMS=1.0
Event History
Apr 19, 2025
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Jul 14, 57721
Event
via NVD·06:42 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-3816?
CVE-2025-3816 is classified as a critical vulnerability.
2
How do I fix CVE-2025-3816?
To fix CVE-2025-3816, update the CicadasCMS software to the latest version that patches this vulnerability.
3
What type of vulnerability is CVE-2025-3816?
CVE-2025-3816 is an OS command injection vulnerability.
4
Can CVE-2025-3816 be exploited remotely?
Yes, CVE-2025-3816 can be exploited remotely.
5
Which component is affected by CVE-2025-3816?
CVE-2025-3816 affects the Scheduled Task Handler component of CicadasCMS.