CVE-2021-39428: XSS
Published Dec 15, 2022
·Updated
Cross Site Scripting (XSS) vulnerability in Users.php in eyoucms 1.5.4 allows remote attackers to run arbitrary code and gain escalated privilege via the filename for editusersheadpic.
Affected Software
1 affected component
Eyoucms Eyoucms=1.5.4
Event History
Dec 15, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-39428?
CVE-2021-39428 is a Cross Site Scripting (XSS) vulnerability in Users.php in eyoucms 1.5.4.
2
What is the impact of CVE-2021-39428?
CVE-2021-39428 allows remote attackers to run arbitrary code and gain escalated privilege via the filename for edit_users_head_pic.
3
How can I fix CVE-2021-39428?
To fix CVE-2021-39428, it is recommended to upgrade to a patched version of eyoucms.
4
What is the severity of CVE-2021-39428?
CVE-2021-39428 has a severity rating of medium with a CVSS score of 5.4.
5
Where can I find more information about CVE-2021-39428?
More information about CVE-2021-39428 can be found at the following link: https://github.com/eyoucms/eyoucms/issues/14