CVE-2025-15204

CVE-2025-15204 affects SohuTV CacheCloud up to version 3.2.0, where the doQuartzList function in QuartzManageController.java is vulnerable to cross-site scripting. The vulnerability can be exploited remotely; exploitation details are publicly disclosed. Connected sources consistently describe the...

CVE-2025-15146

CVE-2025-15146 affects SohuTV CacheCloud up to version 3.2.0. The vulnerability resides in doUserList (src/main/java/com/sohu/cache/web/controller/UserManageController.java); manipulated input can trigger cross-site scripting. The attack is remote and the exploit is publicly available. Mitigation...

CVE-2025-15202

CVE-2025-15202 affects SohuTV CacheCloud up to version 3.2.0. The vulnerability resides in the taskQueueList function of src/main/java/com/sohu/cache/web/controller/TaskController.java, enabling cross-site scripting. It can be exploited remotely and, according to sources, the exploit has been pub...

CVE-2025-15203

SohuTV CacheCloud up to 3.2.0 is affected by a cross-site scripting flaw in the index function of ResourceController.java (src/main/java/com/sohu/cache/web/controller/ResourceController.java). Manipulation of the index function allows remote attackers to trigger XSS, with a public exploit availab...

CVE-2025-15200

SohuTV CacheCloud up to version 3.2.0 is affected by a cross‑site scripting vulnerability in AppClientDataShowController.java (functions getExceptionStatisticsByClient, getCommandStatisticsByClient, doIndex). The issue enables remote exploitation and, per multiple sources, the exploit is public. ...