CVE-2025-65868

XML external entity XXE injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST request...

CVE-2025-65868

The eyoucms content management system, based on ThinkPHP, is vulnerable to an XML external entity (XXE) injection in version v1.7.1 . A remote attacker can exploit this flaw by sending a specially crafted body within a POST request , which can lead to a denial of service (DoS) . To remediate this...