Vulnerability Description
A vulnerability was determined in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. The impacted element is the function Save of the file src/main/java/com/zhiliao/common/template/TemplateFileServiceImpl.java of the component Template Management Page. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Westboy | Cicadascms | 1.0 |
Related Weaknesses (CWE)
References
- https://github.com/devastatingglamour/CVE/blob/main/CicadasCMS-XSS4.mdExploitThird Party Advisory
- https://vuldb.com/?ctiid.327170Permissions RequiredVDB Entry
- https://vuldb.com/?id.327170Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.659789Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.709804
- https://github.com/devastatingglamour/CVE/blob/main/CicadasCMS-XSS4.mdExploitThird Party Advisory
FAQ
What is CVE-2025-11289?
CVE-2025-11289 is a vulnerability with a CVSS score of 2.4 (LOW). A vulnerability was determined in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. The impacted element is the function Save of the file src/main/java/com/zhiliao/common/template/Tem...
How severe is CVE-2025-11289?
CVE-2025-11289 has been rated LOW with a CVSS base score of 2.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-11289?
Check the references section above for vendor advisories and patch information. Affected products include: Westboy Cicadascms.