CVE-2024-23033: XSS
Published Feb 1, 2024
·Updated
Cross Site Scripting vulnerability in the path parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL.
Affected Software
1 affected component
Eyoucms Eyoucms=1.6.5
Event History
Feb 1, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-23033?
CVE-2024-23033 is classified as a high severity vulnerability due to its potential for exploitation through remote code execution.
2
How do I fix CVE-2024-23033?
To mitigate CVE-2024-23033, users should upgrade to the latest version of Eyoucms that addresses this vulnerability.
3
What software is affected by CVE-2024-23033?
CVE-2024-23033 affects Eyoucms version 1.6.5 specifically.
4
What type of vulnerability is CVE-2024-23033?
CVE-2024-23033 is a Cross Site Scripting (XSS) vulnerability in the path parameter.
5
What is the exploit method for CVE-2024-23033?
Attackers can exploit CVE-2024-23033 using a crafted URL to execute arbitrary code.