high7.5
CVE-2025-65868
XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST request.
Impact
XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eyoucms | Eyoucms | Version 1.7.1 |