CVE-2023-48881: XSS

Published Nov 29, 2023

Updated

A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Field Title field at /login.php?m=admin&c=Field&a=arctypeadd&ajax=1&lang=cn.

Affected Software

1 affected component

Eyoucms Eyoucms=1.6.4

Event History

Nov 29, 2023

CVE Published

12:00 AM

Data Sourced

12:00 AM

Description

Frequently Asked Questions

What is CVE-2023-48881?

CVE-2023-48881 is a stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 that allows attackers to execute arbitrary web scripts or HTML.

How does CVE-2023-48881 impact EyouCMS?

CVE-2023-48881 allows attackers to inject a crafted payload into the Field Title field and execute arbitrary web scripts or HTML.

How severe is CVE-2023-48881?

CVE-2023-48881 has a severity rating of 4.8, which is considered medium.

What software version is affected by CVE-2023-48881?

EyouCMS v1.6.4 is affected by CVE-2023-48881.

Is there a fix available for CVE-2023-48881?

Currently, there is no known fix available for CVE-2023-48881. It is recommended to update to a patched version once it becomes available.