CVE-2023-37135: XSS
Published Jul 6, 2023
·Updated
A stored cross-site scripting (XSS) vulnerability in the Image Upload module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Affected Software
1 affected component
Eyoucms Eyoucms=1.6.3
Event History
Jul 6, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this stored cross-site scripting (XSS) vulnerability?
The vulnerability ID is CVE-2023-37135.
2
What is the affected software version of this vulnerability?
The affected software version is eyoucms v1.6.3.
3
What is the severity level of this vulnerability?
The severity level of this vulnerability is medium with a CVSS score of 5.4.
4
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by uploading a crafted payload containing arbitrary web scripts or HTML.
5
Is there a fix available for this vulnerability?
Yes, it is recommended to update to a patched version of eyoucms to fix this vulnerability.