CVE-2022-45540: XSS
First published: Fri Jan 20 2023(Updated: )
EyouCMS <= 1.6.0 was discovered a reflected-XSS in article type editor component in POST value "name" if the value contains a malformed UTF-8 char.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Eyoucms Eyoucms | <=1.6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-45540.
What is the severity level of CVE-2022-45540?
The severity level of CVE-2022-45540 is medium.
What is affected by CVE-2022-45540?
EyouCMS versions up to and including 1.6.0 are affected by CVE-2022-45540.
What is the impact of CVE-2022-45540?
CVE-2022-45540 allows for reflected-XSS attacks if the POST value "name" contains a malformed UTF-8 character.
How can I fix CVE-2022-45540?
To fix CVE-2022-45540, it is recommended to update to a version of EyouCMS that is higher than 1.6.0.
- collector/nvd-index
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/references
- agent/severity
- agent/first-publish-date
- agent/event
- agent/tags
- agent/description
- agent/type
- vendor/eyoucms
- canonical/eyoucms eyoucms
- version/eyoucms eyoucms/1.6.0