CVE-2024-52680: XSS
Published Aug 7, 2025
·Updated
EyouCMS 1.6.7 is vulnerable to Cross Site Scripting (XSS) in /login.php?m=admin&c=System&a=web&lang=cn.
Affected Software
2 affected components
eyoucms eyoucms
eyoucms eyoucms=1.6.7
Event History
Aug 7, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-52680?
CVE-2024-52680 is categorized as a high severity vulnerability due to the potential for exploit via Cross Site Scripting (XSS).
2
How do I fix CVE-2024-52680?
To fix CVE-2024-52680, developers should implement proper input validation and sanitization in the affected /login.php endpoint.
3
What type of vulnerability is CVE-2024-52680?
CVE-2024-52680 is a Cross Site Scripting (XSS) vulnerability that affects the EyouCMS software.
4
Which version of EyouCMS is affected by CVE-2024-52680?
EyouCMS version 1.6.7 is affected by CVE-2024-52680.
5
What is the impact of CVE-2024-52680 on users?
The impact of CVE-2024-52680 includes the ability for attackers to inject malicious scripts that can compromise user sessions and data.