CVE-2024-23034: XSS
Published Feb 1, 2024
·Updated
Cross Site Scripting vulnerability in the input parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL.
Affected Software
1 affected component
Eyoucms Eyoucms=1.6.5
Event History
Feb 1, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-23034?
CVE-2024-23034 is classified as a high-severity Cross Site Scripting vulnerability.
2
How do I fix CVE-2024-23034?
To mitigate CVE-2024-23034, update Eyoucms to the latest version or sanitize user input that is processed.
3
What is the impact of CVE-2024-23034?
CVE-2024-23034 allows remote attackers to execute arbitrary code, potentially compromising the security of the application.
4
In which version of Eyoucms is CVE-2024-23034 present?
CVE-2024-23034 is present in Eyoucms version 1.6.5.
5
Is Eyoucms the only affected software for CVE-2024-23034?
Yes, CVE-2024-23034 specifically affects Eyoucms version 1.6.5.