Page 2 of 27 results (0.003 seconds)

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-45537

https://notcve.org/view.php?id=CVE-2022-45537

EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENV_LIST_URL". EyouCMS &lt;= 1.6.0 descubrió un XSS reflejado en el componente de publicación del artículo en la cookie "ENV_LIST_URL". • https://github.com/weng-xianhu/eyoucms/issues/34 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-45539

https://notcve.org/view.php?id=CVE-2022-45539

EyouCMS <= 1.6.0 was discovered a reflected-XSS in FileManager component in GET value "activepath" when creating a new file. EyouCMS &lt;= 1.6.0 descubrió un XSS reflejado en el componente FileManager en el valor GET "activepath" al crear un nuevo archivo. • https://github.com/weng-xianhu/eyoucms/issues/38 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-45542

https://notcve.org/view.php?id=CVE-2022-45542

EyouCMS <= 1.6.0 was discovered a reflected-XSS in the FileManager component in GET parameter "filename" when editing any file. EyouCMS &lt;= 1.6.0 descubrió un XSS reflejado en el componente FileManager en el parámetro GET "filename" al editar cualquier archivo. • https://github.com/weng-xianhu/eyoucms/issues/33 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-45540

https://notcve.org/view.php?id=CVE-2022-45540

EyouCMS <= 1.6.0 was discovered a reflected-XSS in article type editor component in POST value "name" if the value contains a malformed UTF-8 char. En EyouCMS &lt;= 1.6.0 se descubrió un XSS reflejado en el componente del editor de tipo de artículo en el valor POST "nombre" si el valor contiene un carácter UTF-8 con formato incorrecto. • https://github.com/weng-xianhu/eyoucms/issues/37 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-45541

https://notcve.org/view.php?id=CVE-2022-45541

EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the value contains a non-integer char. EyouCMS &lt;= 1.6.0 descubrió un XSS reflejado en el componente del editor de atributos del artículo en el valor POST "value" si el valor contiene un carácter no entero. • https://github.com/weng-xianhu/eyoucms/issues/36 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •