Cross site scripting

A stored cross-site scripting XSS vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Document Properties field at /login.php m=admin&c=Index&a=changeTableVal&ajax=1&lang=cn...

CVE-2023-48882

CVE-2023-48882 affects EyouCMS v1.6.4-UTF8-SP1 with a stored XSS vulnerability in the Document Properties field on the login page (/login.php m=admin&c=Index&a=changeTableVal&_ajax=1&lang=cn). The flaw can allow arbitrary web scripts/HTML to be executed, as described in multiple sources. The CVSS...

CVE-2023-48880

A stored cross-site scripting XSS vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu Name field at /login.php?m=admin&c=Index&a=changeTableVal&ajax=1&lang=cn...

CVE-2023-48880

CVE-2023-48880 affects EyouCMS v1.6.4-UTF8-SP1. It describes a stored XSS via the Menu Name field when calling /login.php?m=admin&c=Index&a=changeTableVal&_ajax=1&lang=cn. The practical impact is arbitrary script/HTML execution in the admin login context. Connected sources indicate the vulnerable...

EyouCMS Security Vulnerability

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCMS v1.6.4-UTF8-SP1, which stems from the presence of a stored cross-site scripting XSS vulnerability...

CVE-2023-48882

A stored cross-site scripting XSS vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Document Properties field at /login.php m=admin&c=Index&a=changeTableVal&ajax=1&lang=cn...

CVE-2023-48881

CVE-2023-48881 – EyouCMS v1.6.4-UTF8-SP1 stored XSS is documented across multiple sources. The vulnerability affects the login workflow at /login.php?m=admin&c=Field&a=arctype_add&_ajax=1&lang=cn, where a crafted payload injected into the Field Title field can execute arbitrary web scripts/HTML. ...

EyouCMS Security Vulnerability

Zanzan Network Technology EyouCms EyouCMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCMS v1.6.4-UTF8-SP1, which stems from a stored cross-site scripting XSS vulnerability in the Document Properties...

CVE-2023-48880

A stored cross-site scripting XSS vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu Name field at /login.php?m=admin&c=Index&a=changeTableVal&ajax=1&lang=cn...

CVE-2023-48881

A stored cross-site scripting XSS vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Field Title field at /login.php?m=admin&c=Field&a=arctypeadd&ajax=1&lang=cn...

PT-2023-30995 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.6.4-UTF8-SP1 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu Name field at...

EyouCMS Security Vulnerability

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCMS v1.6.4-UTF8-SP1, which stems from the presence of a stored cross-site scripting XSS vulnerability...

CVE-2023-46935

eyoucms v1.6.4 is vulnerable Cross Site Scripting XSS, which can lead to stealing sensitive information of logged-in users...

CVE-2023-46935

eyoucms v1.6.4 is vulnerable Cross Site Scripting XSS, which can lead to stealing sensitive information of logged-in users...

CVE-2023-46935

eyoucms v1.6.4 is vulnerable Cross Site Scripting XSS, which can lead to stealing sensitive information of logged-in users...

Cross site scripting

eyoucms v1.6.4 is vulnerable Cross Site Scripting XSS, which can lead to stealing sensitive information of logged-in users...

CVE-2023-46935

The CVE-2023-46935 entry concerns eyoucms v1.6.4 with a Cross Site Scripting (XSS) vulnerability. Sources in connected documents indicate a stored XSS variant that could allow an attacker to steal sensitive information from logged-in users. The reported impact is confidentiality and user data exp...

CVE-2023-46935

eyoucms v1.6.4 is vulnerable Cross Site Scripting XSS, which can lead to stealing sensitive information of logged-in users...

PT-2023-30265 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: eyoucms version 1.6.4 Description: The issue allows for Cross Site Scripting XSS, which can lead to stealing sensitive information of logged-in users. Recommendations: For eyoucms version 1.6.4, update to a version that fixes the Cross Site...

EyouCms Security Vulnerability

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms v1.6.4, which stems from a stored cross-site scripting XSS vulnerability. The vulnerability can be exploited ...