CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2022-45541
https://notcve.org/view.php?id=CVE-2022-45541
EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the value contains a non-integer char. EyouCMS <= 1.6.0 descubrió un XSS reflejado en el componente del editor de atributos del artículo en el valor POST "value" si el valor contiene un carácter no entero. • https://github.com/weng-xianhu/eyoucms/issues/36 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1CVE-2021-39428
https://notcve.org/view.php?id=CVE-2021-39428
Cross Site Scripting (XSS) vulnerability in Users.php in eyoucms 1.5.4 allows remote attackers to run arbitrary code and gain escalated privilege via the filename for edit_users_head_pic. Vulnerabilidad de Cross Site Scripting (XSS) en Users.php en eyoucms 1.5.4 permite a atacantes remotos ejecutar código arbitrario y obtener privilegios escalados a través del nombre de archivo edit_users_head_pic. • https://github.com/eyoucms/eyoucms/issues/14 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1CVE-2022-45280
https://notcve.org/view.php?id=CVE-2022-45280
A cross-site scripting (XSS) vulnerability in the Url parameter in /login.php of EyouCMS v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Una Cross-site Scripting (XSS) en el parámetro Url en /login.php de EyouCMS v1.6.0 permite a los atacantes ejecutar scripts web o HTML de su elección a través de un payload manipulado. • https://github.com/weng-xianhu/eyoucms/issues/32 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-44387
https://notcve.org/view.php?id=CVE-2022-44387
EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Basic Information component under the Edit Member module. Se descubrió que EyouCMS V1.5.9-UTF8-SP1 contenía un vulnerabilidad de Cross-Site Request Forgery (CSRF) a través del componente Información básica en el módulo Editar miembro. • https://github.com/weng-xianhu/eyoucms/issues/29 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-44389
https://notcve.org/view.php?id=CVE-2022-44389
EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Edit Admin Profile module. This vulnerability allows attackers to arbitrarily change Administrator account information. Se descubrió que EyouCMS V1.5.9-UTF8-SP1 contenía una vulnerabilidad de Cross-Site Request Forgery (CSRF) a través del módulo Editar perfil de administrador. Esta vulnerabilidad permite a los atacantes cambiar arbitrariamente la información de la cuenta del administrador. • https://github.com/weng-xianhu/eyoucms/issues/30 • CWE-352: Cross-Site Request Forgery (CSRF) •