CVE-2025-15146

A flaw was found in SohuTV CacheCloud up to version 3.2.0. It affects the index function in the file src/main/java/com/sohu/cache/web/controller/AppDataMigrateController.java. This manipulation causes cross-site scripting. Remote exploitation is possible. The exploit has been published and may be used. The project was informed but has not responded.

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. Affects the function init of the file src/main/java/com/sohu/cache/web/controller/LoginController.java. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public. The project was informed but has not responded.

In SohuTV CacheCloud up to 3.2.0, the doMachineList/doPodList functions in MachineManageController.java are vulnerable to cross-site scripting (XSS). The attack can be performed remotely, and the exploit has been publicly disclosed. The project has not responded to the issue report.

A vulnerability was determined in SohuTV CacheCloud up to 3.2.0. The function doQuartzList in QuartzManageController.java is affected. Executing manipulation can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The project was informed but has not responded.

A vulnerability was found in SohuTV CacheCloud up to 3.2.0. The function index in ResourceController.java is affected. Performing manipulation results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and could be used. The project was informed but has not responded.

In SohuTV CacheCloud up to 3.2.0, the taskQueueList function in TaskController.java is vulnerable to cross-site scripting (XSS). The attack can be performed remotely, and the exploit has been publicly disclosed. The project has not responded to the issue report.

A cross-site scripting vulnerability was found in SohuTV CacheCloud up to 3.2.0 in the redirectNoPower function in WebResourceController.java. The attack can be executed remotely and the exploit has been published. The project has not responded.

A cross-site scripting vulnerability was found in SohuTV CacheCloud up to 3.2.0 in functions getExceptionStatisticsByClient/getCommandStatisticsByClient/doIndex in AppClientDataShowController.java. The attack can be executed remotely and the exploit is public. The project has not responded.

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0 affecting the doAppList/appCommandAnalysis function in src/main/java/com/sohu/cache/web/controller/AppController.java. Manipulating input results in cross site scripting. The attack can be launched remotely and the exploit is publicly available.

A security vulnerability was detected in SohuTV CacheCloud up to 3.2.0 affecting the doAppAuditList function in src/main/java/com/sohu/cache/web/controller/AppManageController.java. Such manipulation leads to cross site scripting. The attack may be performed remotely and the exploit has been publicly disclosed.