3 matches found
CVE-2022-45538
EyouCMS = 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENVGOBACKURL"...
CVE-2022-45538
CVE-2022-45538 affects EyouCMS up to version 1.6.0, with a reflected-XSS vulnerability in the article publish component that uses the cookie value ENV_GOBACK_URL. The root cause is a failure to properly neutralize user-controlled input reflected from the ENV_GOBACK_URL cookie, enabling an attacke...