CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2022-45540
https://notcve.org/view.php?id=CVE-2022-45540
EyouCMS <= 1.6.0 was discovered a reflected-XSS in article type editor component in POST value "name" if the value contains a malformed UTF-8 char. En EyouCMS <= 1.6.0 se descubrió un XSS reflejado en el componente del editor de tipo de artículo en el valor POST "nombre" si el valor contiene un carácter UTF-8 con formato incorrecto. • https://github.com/weng-xianhu/eyoucms/issues/37 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2022-45541
https://notcve.org/view.php?id=CVE-2022-45541
EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the value contains a non-integer char. EyouCMS <= 1.6.0 descubrió un XSS reflejado en el componente del editor de atributos del artículo en el valor POST "value" si el valor contiene un carácter no entero. • https://github.com/weng-xianhu/eyoucms/issues/36 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-26279
https://notcve.org/view.php?id=CVE-2022-26279
EyouCMS v1.5.5 was discovered to have no access control in the component /data/sqldata. Se ha detectado que EyouCMS versión v1.5.5, no presenta control de acceso en el componente /data/sqldata • https://github.com/eyoucms/eyoucms/issues/22 https://www.eyoucms.com/rizhi • CWE-425: Direct Request ('Forced Browsing') •
CVSS: 8.1EPSS: 0%CPEs: 1EXPL: 1CVE-2021-46255
https://notcve.org/view.php?id=CVE-2021-46255
eyouCMS V1.5.5-UTF8-SP3_1 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename. eyouCMS versión V1.5.5-UTF8-SP3_1, sufre un borrado Arbitrario de archivos debido a un filtrado insuficiente del parámetro filename • https://github.com/eyoucms/eyoucms/issues/21 •