CVE-2023-37136

A stored cross-site scripting XSS vulnerability in the Basic Website Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-37136

Summary: CVE-2023-37136 is a stored XSS vulnerability in the Basic Website Information module of eyoucms v1.6.3. The issue allows an attacker to inject and execute arbitrary web scripts or HTML via a crafted payload. The NVD entry lists CVSS‑3.1 metrics: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N with a...