CVE-2022-45539: XSS
Published Jan 20, 2023
·Updated
EyouCMS <= 1.6.0 was discovered a reflected-XSS in FileManager component in GET value "activepath" when creating a new file.
Affected Software
1 affected component
Eyoucms Eyoucms<=1.6.0
Event History
Jan 20, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-45539.
2
What is the severity level of CVE-2022-45539?
CVE-2022-45539 has a severity level of medium (6.1).
3
What software versions are affected by CVE-2022-45539?
CVE-2022-45539 affects EyouCMS versions up to and including 1.6.0.
4
What is the CWE ID for this vulnerability?
The CWE ID for CVE-2022-45539 is 79 (Improper Neutralization of Input During Web Page Generation).
5
Where can I find more information about CVE-2022-45539?
You can find more information about CVE-2022-45539 at the following reference link: [Reference](https://github.com/weng-xianhu/eyoucms/issues/38)