PT-2023-17256 · Eyoucms · Eyoucms
CVSS v2.0
4.0
Média
| Vetor | AV:N/AC:L/Au:S/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
EyouCMS versions up to 1.5.4
Description
A problematic issue was found in EyouCMS, affecting an unknown part of the file login.php. The manipulation of the
tag tag argument leads to cross-site scripting. It is possible to initiate the attack remotely.Recommendations
For EyouCMS versions up to 1.5.4, update to a version later than 1.5.4 to resolve the issue. As a temporary workaround, consider restricting access to the login.php file or disabling the
tag tag argument to minimize the risk of exploitation.Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Eyoucms