Login Request a demo
EY
Product
EyouCMS
by weng-xianhu · last CVE Oct 25, 2026
80
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities80In the news0Timeline
Severity mix
Critical 6High 18Medium 56Low 0
Severity
All severities80Critical6High18Medium56Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add EyouCMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-1107
9.8
1%
Jan 18
EyouCMS Member Avatar Diyajax.php check_userinfo unrestricted upload
Affected: 1.7.0; 1.7.1; 5.0
CVE-2023-42286
9.8
1%
Mar 14
There is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4, allowing attackers to execute code or system commands through a carefully crafted…
Affected: 1.6.4
CVE-2022-26273
9.8
1%
Mar 28
EyouCMS v1.5.4 was discovered to lack parameter filtering in \user\controller\shop.php, leading to payment logic vulnerabilities
Affected: 1.5.4
CVE-2022-26279
9.8
2%
Mar 24
EyouCMS v1.5.5 was discovered to have no access control in the component /data/sqldata
Affected: 1.5.5
CVE-2020-24000
9.8
2%
Nov 3
SQL Injection vulnerability in eyoucms cms v1.4.7, allows attackers to execute arbitrary code and disclose sensitive information, via the tid parameter to index.php
Affected: 1.4.7
CVE-2021-39497
9.8
2%
Sep 7
eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject a url to trigger blind SSRF via the saveRemote() function
Affected: 1.5.4
Showing 6