Description
Cross Site Scripting (XSS) vulnerability in Users.php in eyoucms 1.5.4 allows remote attackers to run arbitrary code and gain escalated privilege via the filename for edit_users_head_pic.
Medium · 5.4
CVE-2021-39428
EUVD-2021-25787GHSA-f2x2-45gc-m3jj
Cross Site Scripting (XSS) vulnerability in Users.php in eyoucms 1.5.4 allows remote attackers to run arbitrary code and gain escalated pri…
Published Dec 15, 2022 · Updated Apr 21, 2025 · Assigned by mitre