Login Request a demo
EY
Product
EyouCMS
by weng-xianhu · last CVE Oct 25, 2026
80
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities80In the news0Timeline
Severity mix
Critical 6High 18Medium 56Low 0
Severity
All severities80Critical6High18Medium56Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add EyouCMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-37136
5.4
0%
Jul 6
A stored cross-site scripting (XSS) vulnerability in the Basic Website Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted…
Affected: 1.6.3
CVE-2023-37135
5.4
0%
Jul 6
A stored cross-site scripting (XSS) vulnerability in the Image Upload module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
Affected: 1.6.3
CVE-2023-37134
5.4
0%
Jul 6
A stored cross-site scripting (XSS) vulnerability in the Basic Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
Affected: 1.6.3
CVE-2023-37133
5.4
0%
Jul 6
A stored cross-site scripting (XSS) vulnerability in the Column management module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
Affected: 1.6.3
CVE-2023-37132
5.4
0%
Jul 6
A stored cross-site scripting (XSS) vulnerability in the custom variables module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
Affected: 1.6.3
CVE-2023-36093
5.4
0%
Jun 22
There is a storage type cross site scripting (XSS) vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3
Affected: 1.6.3
CVE-2023-33492
5.4
0%
Jun 12
EyouCMS 1.6.2 is vulnerable to Cross Site Scripting (XSS)
Affected: 1.6.2
CVE-2023-1799
5.4
1%
Apr 2
A vulnerability, which was classified as problematic, was found in EyouCMS up to 1.5.4
Affected: through 1.5.4
CVE-2023-1798
5.4
1%
Apr 2
A vulnerability, which was classified as problematic, has been found in EyouCMS up to 1.5.4
Affected: through 1.5.4
CVE-2022-45755
5.4
0%
Feb 8
Cross-site scripting (XSS) vulnerability in EyouCMS v1.6.0 allows attackers to execute arbitrary code via the home page description on the basic information page
Affected: 1.6.0
CVE-2022-45542
5.4
0%
Jan 20
EyouCMS <= 1.6.0 was discovered a reflected-XSS in the FileManager component in GET parameter "filename" when editing any file
Affected: through 1.6.0
CVE-2021-39428
5.4
1%
Dec 15
Cross Site Scripting (XSS) vulnerability in Users.php in eyoucms 1.5.4 allows remote attackers to run arbitrary code and gain escalated privilege via the filename for…
Affected: 1.5.4
CVE-2022-45280
5.4
0%
Nov 23
A cross-site scripting (XSS) vulnerability in the Url parameter in /login.php of EyouCMS v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
Affected: 1.6.0
CVE-2022-44390
5.4
0%
Nov 14
A cross-site scripting (XSS) vulnerability in EyouCMS V1.5.9-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Public…
Affected: 1.5.9
CVE-2022-35509
5.4
1%
Aug 9
An issue was discovered in EyouCMS 1.5.8
Affected: 1.5.8
CVE-2021-39496
5.4
1%
Sep 7
Eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject malicious code into `filename` param to trigger Reflected XSS
Affected: 1.5.4
CVE-2020-20645
5.4
0%
Aug 19
Cross Site Scripting (XSS) vulnerability exists in EyouCMS1.3.6 in the basic_information area
Affected: 1.3.6
CVE-2020-21930
5.4
0%
Aug 10
A stored cross site scripting (XSS) vulnerability in the web_attr_2 field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts or HTML
Affected: 1.4.1
CVE-2020-21929
5.4
1%
Aug 10
A stored cross site scripting (XSS) vulnerability in the web_copyright field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts or HTML
Affected: 1.4.1
CVE-2023-37645
5.3
25%
Jul 20
eyoucms v1.6.3 was discovered to contain an information disclosure vulnerability via the component /custom_model_path/recruit.filelist.txt
Affected: 1.6.3
CVE-2023-48882
4.8
0%
Nov 29
A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the…
Affected: 1.6.4
CVE-2023-48881
4.8
0%
Nov 29
A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the…
Affected: 1.6.4
CVE-2023-48880
4.8
0%
Nov 29
A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu…
Affected: 1.6.4
CVE-2023-34657
4.8
0%
Jun 19
A stored cross-site scripting (XSS) vulnerability in Eyoucms v1.6.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the web_recordnum…
Affected: 1.6.2
CVE-2022-33122
4.8
0%
Jun 24
A stored cross-site scripting (XSS) vulnerability in eyoucms v1.5.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL field…
Affected: 1.5.6
CVE-2026-13569
4.7
0%
Jun 29
weng-xianhu EyouCMS API index.php sql injection
Affected: 1.7.0; 1.7.1
CVE-2026-7388
4.7
0%
Apr 29
EyouCMS Template File FilemanagerLogic.php editFile code injection
Affected: 1.7.0; 1.7.1; 1.7.2; 1.7.3; 1.7.4; 1.7.5; +4 more
CVE-2026-6561
4.7
0%
Apr 19
EyouCMS Index.php edit_adminlogo unrestricted upload
Affected: 1.7.0; 1.7.1
CVE-2025-15373
4.3
0%
Dec 31
EyouCMS function.php saveRemote server-side request forgery
Affected: 1.7.0; 1.7.1; 1.7.2; 1.7.3; 1.7.4; 1.7.5; +2 more
CVE-2023-31708
4.3
0%
May 23
A Cross-Site Request Forgery (CSRF) in EyouCMS v1.6.2 allows attackers to execute arbitrary commands via a supplying a crafted HTML file to the Upload software format function
Affected: 1.6.2
Page 2 of 2 · 80 total
12