CVE-2023-37135

A stored cross-site scripting XSS vulnerability in the Image Upload module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-37135

CVE-2023-37135 is a stored cross-site scripting (XSS) vulnerability in the Image Upload module of eyoucms v1.6.3. A crafted payload can cause arbitrary web scripts/HTML to execute in a user context. Affected component: Image Upload in eyoucms 1.6.3. Root cause: stored XSS (no deeper technical det...