https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-11289.htmlhttps://patchthecve.com/cve/CVE-2025-11289.htmlFri, 09 Oct 2026 10:10:00 +0000LOW 2.4: A vulnerability was determined in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. The impacted element is the function Save of the file src/main/java/com/zhiliao/common/template/TemplateFileServiceImpl.java of the component Template Management Page. This manipulation causes cross https://patchthecve.com/cve/CVE-2025-11069.htmlhttps://patchthecve.com/cve/CVE-2025-11069.htmlFri, 09 Oct 2026 10:10:00 +0000LOW 2.4: A vulnerability was determined in westboy CicadasCMS 1.0. Affected by this issue is some unknown functionality of the file /system/org/save of the component Add Department Handler. This manipulation of the argument Name causes cross site scripting. The attack is possible to be carried out remotely. https://patchthecve.com/cve/CVE-2025-11068.htmlhttps://patchthecve.com/cve/CVE-2025-11068.htmlFri, 09 Oct 2026 10:10:00 +0000LOW 2.4: A vulnerability was found in westboy CicadasCMS 1.0. Affected by this vulnerability is an unknown functionality of the file /system/cms/category/save. The manipulation of the argument categoryName results in cross site scripting. The attack can be executed remotely. The exploit has been made public https://patchthecve.com/cve/CVE-2025-3816.htmlhttps://patchthecve.com/cve/CVE-2025-3816.htmlWed, 17 Jun 2026 09:20:43 +0000MEDIUM 4.7: A vulnerability classified as critical was found in westboy CicadasCMS 2.0. This vulnerability affects unknown code of the file /system/schedule/save of the component Scheduled Task Handler. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been dihttps://patchthecve.com/cve/CVE-2025-3585.htmlhttps://patchthecve.com/cve/CVE-2025-3585.htmlWed, 17 Jun 2026 09:20:14 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in westboy CicadasCMS 1.0. This affects an unknown part of the file /upload/ of the component JSP Parser. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been dishttps://patchthecve.com/cve/CVE-2025-2625.htmlhttps://patchthecve.com/cve/CVE-2025-2625.htmlWed, 17 Jun 2026 09:07:18 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in westboy CicadasCMS 1.0. This affects an unknown part of the file /system/cms/content/page. The manipulation of the argument orderField/orderDirection leads to sql injection. It is possible to initiate the attack remotely. The exploit has been https://patchthecve.com/cve/CVE-2025-2624.htmlhttps://patchthecve.com/cve/CVE-2025-2624.htmlWed, 17 Jun 2026 09:07:18 +0000MEDIUM 6.3: A vulnerability was found in westboy CicadasCMS 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /system/cms/content/save. The manipulation of the argument content/fujian/laiyuan leads to sql injection. The attack may be launched remotely. The explhttps://patchthecve.com/cve/CVE-2025-2623.htmlhttps://patchthecve.com/cve/CVE-2025-2623.htmlWed, 17 Jun 2026 09:07:18 +0000LOW 3.5: A vulnerability was found in westboy CicadasCMS 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /system/cms/content/save. The manipulation of the argument title/content/laiyuan leads to cross site scripting. The attack can be launched https://patchthecve.com/cve/CVE-2025-1556.htmlhttps://patchthecve.com/cve/CVE-2025-1556.htmlWed, 17 Jun 2026 08:39:21 +0000MEDIUM 4.7: A vulnerability, which was classified as problematic, has been found in westboy CicadasCMS 1.0. This issue affects some unknown processing of the file /system of the component Template Management. The manipulation leads to deserialization. The attack may be initiated remotely. The exploit has been d