CVE-2022-45538: XSS
Published Jan 20, 2023
·Updated
EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENVGOBACKURL".
Affected Software
1 affected component
Eyoucms Eyoucms<=1.6.0
Event History
Jan 20, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2022-45538.
2
What is the severity of CVE-2022-45538?
The severity of CVE-2022-45538 is medium with a severity value of 6.1.
3
What is the affected software version?
The affected software version is EyouCMS <= 1.6.0.
4
What is the CWE number associated with CVE-2022-45538?
The CWE number associated with CVE-2022-45538 is 79.
5
How do I fix CVE-2022-45538?
To fix CVE-2022-45538, it is recommended to update EyouCMS to a version higher than 1.6.0.