high7.5
CVE-2025-22984
An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information.
Impact
An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thecosy | Icecms | Version 2.2.0 |