CVE-2024-23032: XSS
Published Feb 1, 2024
·Updated
Cross Site Scripting vulnerability in num parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL.
Affected Software
1 affected component
Eyoucms Eyoucms=1.6.5
Event History
Feb 1, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-23032?
CVE-2024-23032 is rated as a high severity Cross Site Scripting vulnerability.
2
How do I fix CVE-2024-23032?
To fix CVE-2024-23032, upgrade Eyoucms to a version that has patched this vulnerability.
3
What software is affected by CVE-2024-23032?
CVE-2024-23032 specifically affects Eyoucms version 1.6.5.
4
What type of vulnerability is CVE-2024-23032?
CVE-2024-23032 is a Cross Site Scripting (XSS) vulnerability.
5
How does CVE-2024-23032 allow remote code execution?
CVE-2024-23032 allows a remote attacker to execute arbitrary code via a crafted URL targeting the num parameter.