VulnCheck KEV: CVE-2024-22927

Cross Site Scripting XSS vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...

CVE-2024-22927

creationtimestamp| type| source ---|---|--- 2024-02-02 00:26:29+00:00| seen| https://t.me/ctinow/177843 2024-02-02 19:17:06+00:00| seen| https://t.me/ctinow/178234 2024-02-24 15:16:46+00:00| seen| https://t.me/ctinow/192618 2026-04-23 21:03:10+00:00| seen|...

CVE-2024-22927

Cross Site Scripting XSS vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...

CVE-2024-22927

CVE-2024-22927 affects eyoucms v1.6.5. An XSS flaw exists in the func parameter that lets a remote attacker run arbitrary scripts via a crafted URL. The issue, described as Cross-Site Scripting, could enable browser-side code execution. The Nuclei template confirms the vulnerability details and r...