CVE-2025-11068: Westboy Cicadascms

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability was found in westboy CicadasCMS 1.0. Affected by this vulnerability is an unknown functionality of the file /system/cms/category/save. The manipulation of the argument categoryName results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could be used.

Affected products

• Westboy Cicadascms: version 1.0 only

Published 2025-09-27. Last modified 2026-10-09.