Eyoucms: >> Eyoucms >> 1.5.5 Security Vulnerabilities
EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the value contains a non-integer char.
CVSS Score
6.1
EPSS Score
0.003
Published
2023-01-20
EyouCMS <= 1.6.0 was discovered a reflected-XSS in the FileManager component in GET parameter "filename" when editing any file.
CVSS Score
5.4
EPSS Score
0.003
Published
2023-01-20
EyouCMS v1.5.5 was discovered to have no access control in the component /data/sqldata.
CVSS Score
9.8
EPSS Score
0.01
Published
2022-03-24
Page 2