CVE-2023-1798

CVE-2023-1798 affects EyouCMS versions up to 1.5.4. The vulnerability resides in login.php where manipulating the typename argument enables cross-site scripting. It can be triggered remotely and an exploit has been publicly disclosed. Affected product: EyouCMS; vulnerable function/file: login.php...