CVE-2023-2057: EyouCms New Picture cross site scripting

Published Apr 14, 2023

Updated

A vulnerability was found in EyouCms 1.5.4. It has been classified as problematic. Affected is an unknown function of the file login.php?m=admin&c=Arctype&a=edit of the component New Picture Handler. The manipulation of the argument litpicloca leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225942 is the identifier assigned to this vulnerability.

Affected Software

1 affected component

Eyoucms Eyoucms=1.5.4

Event History

Apr 14, 2023

CVE Published

01:31 PM

Data Sourced

01:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-2057?

The severity of CVE-2023-2057 is medium with a CVSS score of 6.1.

What is the affected software for CVE-2023-2057?

The affected software for CVE-2023-2057 is EyouCms version 1.5.4.

How does CVE-2023-2057 affect EyouCms?

CVE-2023-2057 allows for cross-site scripting (XSS) attacks in EyouCms version 1.5.4.

Is there a fix available for CVE-2023-2057?

Yes, it is recommended to update EyouCms to a patched version that addresses the vulnerability.

Where can I find more information about CVE-2023-2057?

You can find more information about CVE-2023-2057 at the following references: [Reference 1](https://github.com/sleepyvv/vul_report/blob/main/EYOUCMS/XSS1.md), [Reference 2](https://vuldb.com/?ctiid.225942), [Reference 3](https://vuldb.com/?id.225942).