CVE-2022-45280

CVE-2022-45280 describes a cross-site scripting (XSS) vulnerability in the Url parameter of the "/login.php" endpoint in EyouCMS v1.6.0 . The issue allows an attacker to inject and execute arbitrary web scripts or HTML in a victim’s browser. Multiple sources consistently identify the vulnerable c...