Cross site scripting

2024-02-0123:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

eyoucms v1.6.5

vulnerability

remote code execution

crafted url

6.5 Medium

AI Score

Confidence

High

0.108 Low

EPSS

Percentile

95.1%

Cross Site Scripting (XSS) vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL.

CPENameOperatorVersion
eyoucmseq1.6.5

CPE	Name	Operator	Version
	eyoucms	eq	1.6.5

References

github.com/weng-xianhu/eyoucms/issues/57