Unscored CVE-2022-44390 EUVD-2022-47333GHSA-6q84-mpc4-83g2

A cross-site scripting (XSS) vulnerability in EyouCMS V1.5.9-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a craft…

Published Nov 14, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

A cross-site scripting (XSS) vulnerability in EyouCMS V1.5.9-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Public Security Record Number text field.

References

https://github.com/weng-xianhu/eyoucms/issues/31