PT-2021-10694
CVE-2020-21929
·
Published
2021-08-10
·
Updated
2021-08-13
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Eyoucms version 1.4.1
Description:
A stored cross site scripting (XSS) vulnerability in the
web copyright field allows authenticated attackers to execute arbitrary web scripts or HTML. This issue enables attackers to inject malicious code, potentially leading to unauthorized access or control of the affected system.Recommendations:
For Eyoucms version 1.4.1, update the software to a version that fixes the stored XSS vulnerability in the
web copyright field. As a temporary workaround, consider restricting access to the web copyright field to prevent exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾