CVE-2025-22984

HIGH 7.5CVE-2025-22984 · Published 14/01/2025 · updated 17/06/2026

In short

CVE-2025-22984 is a HIGH (CVSS 7.5) vulnerability affecting icecms (thecosy).
Chance of exploitation in the next 30 days (EPSS): 0.51%, higher than 43.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
icecms thecosy	`= 2.2.0`	No fix yet

Description

An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information.

References

H3rmesk1t/vulnerability-paper · Exploit

More vulnerabilities in icecms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free