Description
XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST request.
Critical · 9.1
CVE-2025-65868
EUVD-2025-201108GHSA-27fc-mjrp-6g7x
XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST reque…
Published Dec 3, 2025 · Updated Dec 5, 2025 · Assigned by mitre