---
id: CVE-2025-15204
title: A vulnerability was determined in SohuTV CacheCloud up to 3.2.0
summary: >-
  A vulnerability was determined in SohuTV CacheCloud up to 3.2.0. Affected is
  the function doQuartzList of the file
  src/main/java/com/sohu/cache/web/controller/QuartzManageController.java.
  Executing manipulation can lead to cross site scr…
severity: low
cvss: 2.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N'
cwe:
  - CWE-79
  - CWE-94
vendor: sohu
product: cachecloud
affected:
  - cachecloud <= 3.2
published: '2025-12-29'
updated: '2026-10-07'
sourceUpdated: '2026-10-07T12:10:00.170'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-15204'
references:
  - url: 'https://github.com/sohutv/cachecloud/issues/376'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?ctiid.338591'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?id.338591'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?submit.716315'
    label: cna@vuldb.com
  - url: 'https://github.com/sohutv/cachecloud/issues/376'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
epss: 0.00247
epssPercentile: 0.15927
ingestedAt: '2026-10-01T18:55:42.309Z'
---

## Overview

A vulnerability was determined in SohuTV CacheCloud up to 3.2.0. Affected is the function doQuartzList of the file src/main/java/com/sohu/cache/web/controller/QuartzManageController.java. Executing manipulation can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

## Affected

- `cachecloud <= 3.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.