Lucene search
HistoryFeb 01, 2024 - 11:15 p.m.
CVE-2024-22927
cve-2024-22927
cross site scripting
remote attacker
arbitrary code
crafted url
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.108 Low
EPSS
Percentile
95.1%
Cross Site Scripting (XSS) vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL.
Affected configurations
Node
eyoucmseyoucmsMatch1.6.5
References
Related
nuclei
nuclei
eyoucms v.1.6.5 - Cross-Site Scripting
2024-05-06 10:51:22
cvelist
cvelist
CVE-2024-22927
2024-02-01 00:00:00
prion
prion
Cross site scripting
2024-02-01 23:15:00
cve
cve
CVE-2024-22927
2024-02-01 23:15:10
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.108 Low
EPSS
Percentile
95.1%
Related for NVD:CVE-2024-22927