CVE-2023-37132

A stored cross-site scripting XSS vulnerability in the custom variables module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-37136

Summary: CVE-2023-37136 is a stored XSS vulnerability in the Basic Website Information module of eyoucms v1.6.3. The issue allows an attacker to inject and execute arbitrary web scripts or HTML via a crafted payload. The NVD entry lists CVSS‑3.1 metrics: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N with a...

CVE-2023-37136

A stored cross-site scripting XSS vulnerability in the Basic Website Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-37132

A stored cross-site scripting XSS vulnerability in the custom variables module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-37134

A stored cross-site scripting XSS vulnerability in the Basic Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

EyouCms 跨站脚本漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology Company. A security vulnerability exists in EyouCms v1.6.3, which originates from a stored cross-site scripting XSS vulnerability in Basic Information...

EyouCms 跨站脚本漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms v1.6.3, which stems from a stored cross-site scripting XSS vulnerability in the Image Upload module...

CVE-2023-37134

CVE-2023-37134 is a stored cross-site scripting (XSS) vulnerability in the Basic Information module of eyoucms v1.6.3. The vulnerability allows an attacker to inject and execute arbitrary web scripts or HTML via a crafted payload. CVSS v3.1 base metrics reported as 5.4 (Medium) with network attac...

PT-2023-25795 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: eyoucms version 1.6.3 Description: A stored cross-site scripting issue in the Column management module allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations: For eyoucms version 1.6.3, consider...

EyouCms 跨站脚本漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology Company. A security vulnerability exists in EyouCms v1.6.3, which originates from a stored cross-site scripting XSS vulnerability in Basic Website...

CVE-2023-37133

The CVE-2023-37133 entry relates to a stored XSS vulnerability in the Column management module of eyoucms v1.6.3. Technical details across connected sources consistently indicate the issue stems from insufficient input filtering/escaping in that module, allowing an attacker to inject and execute ...

PT-2023-25794 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: eyoucms version 1.6.3 Description: A stored cross-site scripting XSS issue in the custom variables module allows attackers to execute arbitrary web scripts or HTML via a crafted payload. This could potentially lead to the execution of malicio...

PT-2023-25798 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: eyoucms version 1.6.3 Description: A stored cross-site scripting issue in the Basic Website Information module allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations: For eyoucms version 1.6.3, update...

CVE-2023-37133

A stored cross-site scripting XSS vulnerability in the Column management module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-37134

A stored cross-site scripting XSS vulnerability in the Basic Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-37136

A stored cross-site scripting XSS vulnerability in the Basic Website Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-37132

CVE-2023-37132 affects eyoucms v1.6.3 in the custom variables module. It is a stored XSS vulnerability that allows an attacker to execute arbitrary web scripts or HTML via a crafted payload. The CVSS v3.1 base score is 5.4 (Medium) with network attack vector, low attack complexity, required user ...

CVE-2023-36093

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...

CVE-2023-36093

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...

CVE-2023-36093

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...