CVE-2023-34657: XSS
Published Jun 19, 2023
·Updated
A stored cross-site scripting (XSS) vulnerability in Eyoucms v1.6.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the webrecordnum parameter.
Affected Software
1 affected component
Eyoucms Eyoucms=1.6.2
Event History
Jun 19, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2023-34657.
2
What is the severity of CVE-2023-34657?
The severity of CVE-2023-34657 is medium.
3
What is the affected software version?
The affected software version is Eyoucms v1.6.2.
4
How can an attacker exploit CVE-2023-34657?
An attacker can exploit CVE-2023-34657 by injecting a crafted payload into the web_recordnum parameter to execute arbitrary web scripts or HTML.
5
Is there a fix available for CVE-2023-34657?
Please refer to the referenced link for information on available fixes for CVE-2023-34657.