CVE-2026-108790

A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. This impacts the function TemplateController.save of the file /system/cms/template/save of the component Backend Template Editor. The manipulation results in path traversal. The attack may be...

EUVD-2026-97160

A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. This impacts the function TemplateController.save of the file /system/cms/template/save of the component Backend Template Editor. The manipulation results in path traversal. The attack may be...

CVE-2026-108790 westboy CicadasCMS Backend Template Editor save TemplateController.save path traversal

A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. This impacts the function TemplateController.save of the file /system/cms/template/save of the component Backend Template Editor. The manipulation results in path traversal. The attack may be...

CVE-2026-108790 westboy CicadasCMS Backend Template Editor save TemplateController.save path traversal

A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. This impacts the function TemplateController.save of the file /system/cms/template/save of the component Backend Template Editor. The manipulation results in path traversal. The attack may be...

CVE-2026-108790

A security flaw in westboy CicadasCMS (up to version 2431154dac8d0735e04f1fd2a3c3556668fc8dab) allows for path traversal via the TemplateController.save function located at /system/cms/template/save within the Backend Template Editor component. This vulnerability can be triggered remotely, and an...

CVE-2026-108790: Improper Limitation of a Pathname to a Restricted Directory

A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. This impacts the function TemplateController.save of the file /system/cms/template/save of the component Backend Template Editor. The manipulation results in path traversal. The attack may be...

PT-2026-110428

Name of the Vulnerable Software and Affected Versions westboy CicadasCMS versions prior to 2431154dac8d0735e04f1fd2a3c3556668fc8dab Description A remote path traversal flaw exists in the Backend Template Editor component. The issue occurs within the TemplateController.save function located in the...

CVE-2025-50233

QCMS version 6.0.5 is vulnerable to a directory traversal flaw due to insufficient validation of the "Name" parameter in the backend template editor. Authenticated users can manipulate this parameter to read arbitrary files from the server outside the intended template directory. This could resul...

PT-2025-32178 · Qcms · Qcms

Name of the Vulnerable Software and Affected Versions: QCMS version 6.0.5 Description: A vulnerability allows authenticated users to read arbitrary files from the server due to insufficient validation of the Name parameter in the backend template editor. Attackers can manipulate this parameter to...