Page 3 of 61 results (0.005 seconds)

CVSS: 6.1EPSS: 2%CPEs: 1EXPL: 1

CVE-2023-41597

https://notcve.org/view.php?id=CVE-2023-41597

EyouCms v1.6.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /admin/twitter.php?active_t. Se descubrió que EyouCms v1.6.2 contiene una vulnerabilidad de Cross-Site Scripting (XSS) Reflejada a través del componente /admin/twitter.php?active_t. • https://github.com/emlog/emlog/issues/238 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-37645

https://notcve.org/view.php?id=CVE-2023-37645

eyoucms v1.6.3 was discovered to contain an information disclosure vulnerability via the component /custom_model_path/recruit.filelist.txt. • https://github.com/weng-xianhu/eyoucms/issues/50 • CWE-668: Exposure of Resource to Wrong Sphere •

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-37132

https://notcve.org/view.php?id=CVE-2023-37132

A stored cross-site scripting (XSS) vulnerability in the custom variables module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. • https://github.com/weng-xianhu/eyoucms/issues/45 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-37134

https://notcve.org/view.php?id=CVE-2023-37134

A stored cross-site scripting (XSS) vulnerability in the Basic Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. • https://github.com/weng-xianhu/eyoucms/issues/47 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-37136

https://notcve.org/view.php?id=CVE-2023-37136

A stored cross-site scripting (XSS) vulnerability in the Basic Website Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. • https://github.com/weng-xianhu/eyoucms/issues/49 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •