EUVD-2026-97162

A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Affected is the function TemplateController.input of the file /system/cms/template/input of the component Template Management. This manipulation of the argument filePath causes path traversal. It ...

CVE-2026-108791

A path traversal vulnerability exists in westboy CicadasCMS (up to version 2431154dac8d0735e04f1fd2a3c3556668fc8dab) within the Template Management component. Specifically, the TemplateController.input function in the file /system/cms/template/input fails to properly sanitize the filePath argumen...