CVE-2022-35509

2022-08-0918:14:57

mitre

www.cve.org

eyoucms

xss

vulnerability

sensitive information

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

24.8%

JSON

An issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an attacker to execute arbitrary Web scripts or HTML by injecting a special payload via the title parameter in the foreground contribution, allowing the attacker to obtain sensitive information.

References

github.com/eyoucms/eyoucms/issues/25