CVE-2022-45755: XSS
Published Feb 8, 2023
·Updated
Cross-site scripting (XSS) vulnerability in EyouCMS v1.6.0 allows attackers to execute arbitrary code via the home page description on the basic information page.
Affected Software
1 affected component
Eyoucms Eyoucms=1.6.0
Event History
Feb 8, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-45755?
The severity of CVE-2022-45755 is medium with a severity value of 5.4.
2
How does the cross-site scripting (XSS) vulnerability in EyouCMS v1.6.0 allow attackers to execute arbitrary code?
Attackers can execute arbitrary code by exploiting the home page description on the basic information page.
3
What software version is affected by CVE-2022-45755?
The affected software version is EyouCMS v1.6.0.
4
Can you provide a reference for more information on CVE-2022-45755?
Yes, you can find more information on CVE-2022-45755 at the following link: [GitHub - EyouCMS Issue #39](https://github.com/weng-xianhu/eyoucms/issues/39).
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-45755?
The CWE ID for CVE-2022-45755 is CWE-79.