CVE-2023-48880: XSS
First published: Wed Nov 29 2023(Updated: )
A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu Name field at /login.php?m=admin&c=Index&a=changeTableVal&_ajax=1&lang=cn.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Eyoucms Eyoucms | =1.6.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this security issue?
The vulnerability ID is CVE-2023-48880.
What is the severity rating of CVE-2023-48880?
The severity rating of CVE-2023-48880 is medium with a value of 4.8.
What software is affected by CVE-2023-48880?
EyouCMS v1.6.4-UTF8-SP1 is affected by CVE-2023-48880.
How does CVE-2023-48880 work?
CVE-2023-48880 is a stored cross-site scripting (XSS) vulnerability that allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Menu Name field.
Is there a fix or patch available for CVE-2023-48880?
At the moment, there is no specific fix or patch available for CVE-2023-48880. It is recommended to stay updated with the latest version of EyouCMS and follow any security advisories provided by the vendor.
- collector/nvd-api
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/tags
- agent/type
- agent/event
- agent/description
- vendor/eyoucms
- canonical/eyoucms eyoucms
- version/eyoucms eyoucms/1.6.4