CVE-2026-108790

A security flaw in westboy CicadasCMS (up to version 2431154dac8d0735e04f1fd2a3c3556668fc8dab) allows for path traversal via the TemplateController.save function located at /system/cms/template/save within the Backend Template Editor component. This vulnerability can be triggered remotely, and an...