critical9.8
CVE-2022-26273
EyouCMS v1.5.4 was discovered to lack parameter filtering in \user\controller\shop.php, leading to payment logic vulnerabilities.
Impact
EyouCMS v1.5.4 was discovered to lack parameter filtering in \user\controller\shop.php, leading to payment logic vulnerabilities.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eyoucms | Eyoucms | Version 1.5.4 |