EY
Product
EyouCMS
80
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 6High 18Medium 56Low 0
Watch
Add EyouCMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-33122 | 4.8 | Jun 24 | A stored cross-site scripting (XSS) vulnerability in eyoucms v1.5.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL field… Affected: 1.5.6 |
| CVE-2026-13569 | 4.7 | Jun 29 | weng-xianhu EyouCMS API index.php sql injection Affected: 1.7.0; 1.7.1 |
| CVE-2026-7388 | 4.7 | Apr 29 | EyouCMS Template File FilemanagerLogic.php editFile code injection Affected: 1.7.0; 1.7.1; 1.7.2; 1.7.3; 1.7.4; 1.7.5; +4 more |
| CVE-2026-6561 | 4.7 | Apr 19 | EyouCMS Index.php edit_adminlogo unrestricted upload Affected: 1.7.0; 1.7.1 |
| CVE-2025-15373 | 4.3 | Dec 31 | EyouCMS function.php saveRemote server-side request forgery Affected: 1.7.0; 1.7.1; 1.7.2; 1.7.3; 1.7.4; 1.7.5; +2 more |
| CVE-2023-31708 | 4.3 | May 23 | A Cross-Site Request Forgery (CSRF) in EyouCMS v1.6.2 allows attackers to execute arbitrary commands via a supplying a crafted HTML file to the Upload software format function Affected: 1.6.2 |