CVE-2024-23031

Cross Site Scripting XSS vulnerability in iswater parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...

CVE-2024-23031

creationtimestamp| type| source ---|---|--- 2024-02-02 00:26:31+00:00| seen| https://t.me/ctinow/177844 2024-02-02 19:17:05+00:00| seen| https://t.me/ctinow/178233 2024-02-24 15:16:51+00:00| seen| https://t.me/ctinow/192622...

CVE-2024-23031

Cross Site Scripting XSS vulnerability in iswater parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...

CVE-2024-23031

CVE-2024-23031 is a cross-site scripting (XSS) vulnerability in the is_water parameter of eyoucms v1.6.5. The root cause is unsanitized input in that parameter, enabling a remote attacker to run arbitrary code via a crafted URL. Exploitation is network-based and requires user interaction, with CV...