CVE-2023-41597: XSS
Published Nov 15, 2023
·Updated
EyouCms v1.6.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /admin/twitter.php?activet.
Affected Software
1 affected component
Eyoucms Eyoucms=1.6.2
Event History
Nov 15, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-41597?
The severity of CVE-2023-41597 is medium with a CVSS score of 6.1.
2
How does CVE-2023-41597 affect EyouCms?
CVE-2023-41597 affects EyouCms v1.6.2 by exposing a reflected cross-site scripting (XSS) vulnerability via the /admin/twitter.php?active_t component.
3
Is CVE-2023-41597 a critical vulnerability?
No, CVE-2023-41597 is not considered a critical vulnerability but is classified as medium severity.
4
Can the CVE-2023-41597 vulnerability be exploited remotely?
Yes, the CVE-2023-41597 vulnerability can be exploited remotely.
5
Is there a fix available for CVE-2023-41597?
Yes, a fix is available for CVE-2023-41597. It is recommended to update to the latest version of EyouCms to mitigate the vulnerability.