CVE-2025-11069 | westboy CicadasCMS 1.0 Add Department /system/org/save Name cross site scripting

September 26, 2025 Yanac

A vulnerability was found in westboy CicadasCMS 1.0. It has been classified as problematic. Affected by this issue is some unknown functionality of the file /system/org/save of the component Add Department Handler. This manipulation of the argument Name causes cross site scripting.

This vulnerability is tracked as CVE-2025-11069. The attack is possible to be carried out remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More