CVE-2024-22927: XSS
Published Feb 1, 2024
·Updated
Cross Site Scripting (XSS) vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL.
Affected Software
1 affected component
Eyoucms Eyoucms=1.6.5
Event History
Feb 1, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-22927?
CVE-2024-22927 is a critical Cross Site Scripting (XSS) vulnerability affecting Eyoucms version 1.6.5.
2
How do I fix CVE-2024-22927?
To remediate CVE-2024-22927, upgrade Eyoucms to a version higher than 1.6.5 where this vulnerability is not present.
3
What software is affected by CVE-2024-22927?
CVE-2024-22927 affects Eyoucms version 1.6.5 specifically.
4
Can CVE-2024-22927 be exploited remotely?
Yes, CVE-2024-22927 can be exploited remotely by an attacker through a crafted URL.
5
What actions can be taken to prevent CVE-2024-22927 exploitation?
To prevent CVE-2024-22927 exploitation, implement input validation and ensure your Eyoucms installation is updated.