This vulnerability in westboy CicadasCMS up to commit 2431154dac8d0735e04f1fd2a3c3556668fc8dab involves improper sanitization of the argument 's' in the Search function of AbstractCacheManager.java, leading to cross-site scripting (XSS). Remote attackers can exploit this flaw to inject malicious scripts, potentially impacting users interacting with the Search feature. The product's rolling release approach means versioning details for affected or patched releases are not provided. The vendor has been notified but has not yet issued a remediation or official response.

Successful exploitation allows remote attackers to perform cross-site scripting attacks, potentially leading to script execution in users' browsers. This can result in session hijacking, defacement, or other client-side impacts depending on the context of script execution. No direct evidence of widespread exploitation is reported, and the vulnerability does not require privileges or user interaction beyond triggering the vulnerable Search function.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should monitor official channels for updates. Until a fix is available, consider applying input validation or output encoding workarounds on the Search function if feasible, or restrict access to the vulnerable functionality to trusted users only.