CVE-2024-23031: XSS
Published Feb 1, 2024
·Updated
Cross Site Scripting (XSS) vulnerability in iswater parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL.
Affected Software
1 affected component
Eyoucms Eyoucms=1.6.5
Event History
Feb 1, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-23031?
CVE-2024-23031 is classified as a medium severity Cross Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2024-23031?
To fix CVE-2024-23031, you should update Eyoucms to a patched version that addresses this vulnerability.
3
Who is affected by CVE-2024-23031?
CVE-2024-23031 affects users of Eyoucms version 1.6.5.
4
What exploit should I be aware of regarding CVE-2024-23031?
CVE-2024-23031 can be exploited by an attacker to run arbitrary code through crafted URLs.
5
What parameter is involved in CVE-2024-23031?
The vulnerable parameter involved in CVE-2024-23031 is 'is_water'.