github.com
https://github.com/weng-xianhu/eyoucms/issues/55 CVE-2023-46935
MEDIUM
Record summary
CVE-2023-46935 has a selected CVSS score of 5.4 (medium).
Description
eyoucms v1.6.4 is vulnerable Cross Site Scripting (XSS), which can lead to stealing sensitive information of logged-in users.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 10, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
eyoucmsBrowse eyoucms / eyoucmsDefault status: unknown | CVE List | v1.6.4 | affected |
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-46935