Skip to content
OpenAdvisories
Medium · 6.1 CVE-2022-35509 EUVD-2022-38397GHSA-8pp6-vxq4-65qv

An issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an attacker to execute arbitrary Web scripts…

Published Aug 9, 2022 · Updated Jun 23, 2026 · Assigned by mitre

Description

An issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an attacker to execute arbitrary Web scripts or HTML by injecting a special payload via the title parameter in the foreground contribution, allowing the attacker to obtain sensitive information.

References