CVE-2023-2058: EyouCms HTTP POST Request cross site scripting
A vulnerability was found in EyouCms up to 1.6.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /yxcms/index.php?r=admin/extendfield/mesedit&tabid=12&id=4 of the component HTTP POST Request Handler. The manipulation of the argument webico leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225943.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this EyouCms vulnerability?
The vulnerability ID for this EyouCms vulnerability is CVE-2023-2058.
What is the severity rating of CVE-2023-2058?
The severity rating of CVE-2023-2058 is medium (6.1).
What is the affected software version of CVE-2023-2058?
The affected software version of CVE-2023-2058 is EyouCms up to 1.6.2.
What is the CWE ID associated with CVE-2023-2058?
The CWE ID associated with CVE-2023-2058 is CWE-79 (Cross-Site Scripting).
Where can I find more information about CVE-2023-2058?
You can find more information about CVE-2023-2058 on the following references: [GitHub](https://github.com/sleepyvv/vul_report/blob/main/EYOUCMS/XSS2.md), [VulDB](https://vuldb.com/?ctiid.225943), [VulDB](https://vuldb.com/?id.225943).