2 matches found
CVE-2021-39499
CVE-2021-39499 describes a cross-site scripting (XSS) vulnerability in Qiong ICP EyouCMS 1.5.4. The issue is triggered by supplying a crafted value to the title parameter in the bind_email function, allowing remote attackers to inject arbitrary web script or HTML. The reports consistently identif...