medium5.4
CVE-2022-35509
An issue was discovered in EyouCMS 1.5.8.
Impact
An issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an attacker to execute arbitrary Web scripts or HTML by injecting a special payload via the title parameter in the foreground contribution, allowing the attacker to obtain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eyoucms | Eyoucms | Version 1.5.8 |