CVE-2021-42194

creationtimestamp| type| source ---|---|--- 2022-03-21 01:25:25+00:00| seen| https://t.me/cibsecurity/39296...

CVE-2021-42194

CVE-2021-42194—XXE in EyouCms : The vulnerability is in EyouCms V1.5.4-UTF8-SP3, where the wechat_return function in /controller/Index.php passes user input directly to simplexml_load_String. The function does not prohibit external entities, enabling a XML External Entity (XXE) injection. Impact ...