CVE-2023-48880: XSS

Published Nov 29, 2023

Updated

A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu Name field at /login.php?m=admin&c=Index&a=changeTableVal&ajax=1&lang=cn.

Affected Software

1 affected component

Eyoucms Eyoucms=1.6.4

Event History

Nov 29, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the vulnerability ID of this security issue?

The vulnerability ID is CVE-2023-48880.

What is the severity rating of CVE-2023-48880?

The severity rating of CVE-2023-48880 is medium with a value of 4.8.

What software is affected by CVE-2023-48880?

EyouCMS v1.6.4-UTF8-SP1 is affected by CVE-2023-48880.

How does CVE-2023-48880 work?

CVE-2023-48880 is a stored cross-site scripting (XSS) vulnerability that allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Menu Name field.

Is there a fix or patch available for CVE-2023-48880?

At the moment, there is no specific fix or patch available for CVE-2023-48880. It is recommended to stay updated with the latest version of EyouCMS and follow any security advisories provided by the vendor.