CVE-2022-33122: XSS
Published Jun 24, 2022
·Updated
A stored cross-site scripting (XSS) vulnerability in eyoucms v1.5.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL field under the login page.
Affected Software
1 affected component
Eyoucms Eyoucms=1.5.6
Event History
Jun 24, 2022
CVE Published
via MITRE·08:59 PM
Data Sourced
via MITRE·08:59 PM
Description
Frequently Asked Questions
1
What is CVE-2022-33122?
CVE-2022-33122 is a stored cross-site scripting (XSS) vulnerability in eyoucms v1.5.6.
2
How does CVE-2022-33122 affect eyoucms?
CVE-2022-33122 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL field under the login page of eyoucms v1.5.6.
3
What is the severity of CVE-2022-33122?
CVE-2022-33122 has a severity rating of 4.8 (medium).
4
How can I fix CVE-2022-33122 in eyoucms?
To fix CVE-2022-33122 in eyoucms v1.5.6, it is recommended to update to a patched version provided by the eyoucms team.
5
Where can I find more information about CVE-2022-33122?
More information about CVE-2022-33122 can be found in the GitHub issue of eyoucms.