CVE-2022-45540: XSS
Published Jan 20, 2023
·Updated
EyouCMS <= 1.6.0 was discovered a reflected-XSS in article type editor component in POST value "name" if the value contains a malformed UTF-8 char.
Affected Software
1 affected component
Eyoucms Eyoucms<=1.6.0
Event History
Jan 20, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-45540.
2
What is the severity level of CVE-2022-45540?
The severity level of CVE-2022-45540 is medium.
3
What is affected by CVE-2022-45540?
EyouCMS versions up to and including 1.6.0 are affected by CVE-2022-45540.
4
What is the impact of CVE-2022-45540?
CVE-2022-45540 allows for reflected-XSS attacks if the POST value "name" contains a malformed UTF-8 character.
5
How can I fix CVE-2022-45540?
To fix CVE-2022-45540, it is recommended to update to a version of EyouCMS that is higher than 1.6.0.