EY
Product
EyouCMS
80
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 6High 18Medium 56Low 0
Watch
Add EyouCMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-44389 | 6.5 | Nov 14 | EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Edit Admin Profile module Affected: 1.5.9 |
| CVE-2025-52335 | 6.1 | Aug 14 | EyouCMS 1.7.3 is vulnerale to Cross Site Scripting (XSS) in index.php, which can be exploited to obtain sensitive information Affected: 1.7.3 |
| CVE-2024-52680 | 6.1 | Aug 7 | EyouCMS 1.6.7 is vulnerable to Cross Site Scripting (XSS) in /login.php?m=admin&c=System&a=web&lang=cn Affected: 1.6.7 |
| CVE-2024-48195 | 6.1 | Oct 28 | Cross Site Scripting vulnerability in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter Affected: 1.6.7 |
| CVE-2024-23032 | 6.1 | Feb 1 | Cross Site Scripting vulnerability in num parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL Affected: 1.6.5 |
| CVE-2024-23034 | 6.1 | Feb 1 | Cross Site Scripting vulnerability in the input parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL Affected: 1.6.5 |
| CVE-2024-23033 | 6.1 | Feb 1 | Cross Site Scripting vulnerability in the path parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL Affected: 1.6.5 |
| CVE-2024-23031 | 6.1 | Feb 1 | Cross Site Scripting (XSS) vulnerability in is_water parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL Affected: 1.6.5 |
| CVE-2024-22927 | 6.1 | Feb 1 | Cross Site Scripting (XSS) vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL Affected: 1.6.5 |
| CVE-2023-41597 | 6.1 | Nov 15 | EyouCms v1.6.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /admin/twitter.php?active_t Affected: 1.6.2 |
| CVE-2023-30125 | 6.1 | Apr 28 | EyouCms V1.6.1-UTF8-sp1 is vulnerable to Cross Site Scripting (XSS) Affected: 1.6.1-utf8-sp1 |
| CVE-2023-2058 | 6.1 | Apr 14 | A vulnerability was found in EyouCms up to 1.6.2 Affected: through 1.6.2 |
| CVE-2023-2057 | 6.1 | Apr 14 | A vulnerability was found in EyouCms 1.5.4 Affected: 1.5.4 |
| CVE-2022-45541 | 6.1 | Jan 20 | EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the value contains a non-integer char Affected: through 1.6.0 |
| CVE-2022-45540 | 6.1 | Jan 20 | EyouCMS <= 1.6.0 was discovered a reflected-XSS in article type editor component in POST value "name" if the value contains a malformed UTF-8 char Affected: through 1.6.0 |
| CVE-2022-45539 | 6.1 | Jan 20 | EyouCMS <= 1.6.0 was discovered a reflected-XSS in FileManager component in GET value "activepath" when creating a new file Affected: through 1.6.0 |
| CVE-2022-45538 | 6.1 | Jan 20 | EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENV_GOBACK_URL" Affected: through 1.6.0 |
| CVE-2022-45537 | 6.1 | Jan 20 | EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENV_LIST_URL" Affected: through 1.6.0 |
| CVE-2021-39501 | 6.1 | Sep 7 | EyouCMS 1.5.4 is vulnerable to Open Redirect Affected: 1.5.4 |
| CVE-2021-39499 | 6.1 | Sep 7 | A Cross-site scripting (XSS) vulnerability in Users in Qiong ICP EyouCMS 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the `title` parameter in… Affected: 1.5.4 |
| CVE-2020-28146 | 6.1 | Aug 18 | Cross Site Scripting (XSS) vulnerability exists in Eyoucms v1.4.7 and earlier via the addonfieldext parameter Affected: through 1.4.7 |
| CVE-2019-17430 | 6.1 | Oct 10 | EyouCms through 2019-07-11 has XSS related to the login.php web_recordnum parameter Affected: before 1.3.6 |
| CVE-2025-15374 | 5.4 | Dec 31 | EyouCMS Ask Module Ask.php cross site scripting Affected: 1.7.0; 1.7.1; 1.7.2; 1.7.3; 1.7.4; 1.7.5; +2 more |
| CVE-2024-11210 | 5.4 | Nov 14 | EyouCMS FilemanagerLogic.php editFile path traversal Affected: 1.5.1 |
| CVE-2023-50566 | 5.4 | Dec 14 | A stored cross-site scripting (XSS) vulnerability in EyouCMS-V1.6.5-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the… Affected: 1.6.5-utf8-sp1 |
| CVE-2023-46935 | 5.4 | Nov 21 | eyoucms v1.6.4 is vulnerable Cross Site Scripting (XSS), which can lead to stealing sensitive information of logged-in users Affected: 1.6.4 |
| CVE-2023-37136 | 5.4 | Jul 6 | A stored cross-site scripting (XSS) vulnerability in the Basic Website Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted… Affected: 1.6.3 |
| CVE-2023-37135 | 5.4 | Jul 6 | A stored cross-site scripting (XSS) vulnerability in the Image Upload module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload Affected: 1.6.3 |
| CVE-2023-37134 | 5.4 | Jul 6 | A stored cross-site scripting (XSS) vulnerability in the Basic Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload Affected: 1.6.3 |
| CVE-2023-37133 | 5.4 | Jul 6 | A stored cross-site scripting (XSS) vulnerability in the Column management module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload Affected: 1.6.3 |
| CVE-2023-37132 | 5.4 | Jul 6 | A stored cross-site scripting (XSS) vulnerability in the custom variables module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload Affected: 1.6.3 |
| CVE-2023-36093 | 5.4 | Jun 22 | There is a storage type cross site scripting (XSS) vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3 Affected: 1.6.3 |
| CVE-2023-33492 | 5.4 | Jun 12 | EyouCMS 1.6.2 is vulnerable to Cross Site Scripting (XSS) Affected: 1.6.2 |
| CVE-2023-1799 | 5.4 | Apr 2 | A vulnerability, which was classified as problematic, was found in EyouCMS up to 1.5.4 Affected: through 1.5.4 |
| CVE-2023-1798 | 5.4 | Apr 2 | A vulnerability, which was classified as problematic, has been found in EyouCMS up to 1.5.4 Affected: through 1.5.4 |
| CVE-2022-45755 | 5.4 | Feb 8 | Cross-site scripting (XSS) vulnerability in EyouCMS v1.6.0 allows attackers to execute arbitrary code via the home page description on the basic information page Affected: 1.6.0 |
| CVE-2022-45542 | 5.4 | Jan 20 | EyouCMS <= 1.6.0 was discovered a reflected-XSS in the FileManager component in GET parameter "filename" when editing any file Affected: through 1.6.0 |
| CVE-2021-39428 | 5.4 | Dec 15 | Cross Site Scripting (XSS) vulnerability in Users.php in eyoucms 1.5.4 allows remote attackers to run arbitrary code and gain escalated privilege via the filename for… Affected: 1.5.4 |
| CVE-2022-45280 | 5.4 | Nov 23 | A cross-site scripting (XSS) vulnerability in the Url parameter in /login.php of EyouCMS v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload Affected: 1.6.0 |
| CVE-2022-44390 | 5.4 | Nov 14 | A cross-site scripting (XSS) vulnerability in EyouCMS V1.5.9-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Public… Affected: 1.5.9 |
| CVE-2022-35509 | 5.4 | Aug 9 | An issue was discovered in EyouCMS 1.5.8 Affected: 1.5.8 |
| CVE-2021-39496 | 5.4 | Sep 7 | Eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject malicious code into `filename` param to trigger Reflected XSS Affected: 1.5.4 |
| CVE-2020-20645 | 5.4 | Aug 19 | Cross Site Scripting (XSS) vulnerability exists in EyouCMS1.3.6 in the basic_information area Affected: 1.3.6 |
| CVE-2020-21930 | 5.4 | Aug 10 | A stored cross site scripting (XSS) vulnerability in the web_attr_2 field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts or HTML Affected: 1.4.1 |
| CVE-2020-21929 | 5.4 | Aug 10 | A stored cross site scripting (XSS) vulnerability in the web_copyright field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts or HTML Affected: 1.4.1 |
| CVE-2023-37645 | 5.3 | Jul 20 | eyoucms v1.6.3 was discovered to contain an information disclosure vulnerability via the component /custom_model_path/recruit.filelist.txt Affected: 1.6.3 |
| CVE-2023-48882 | 4.8 | Nov 29 | A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the… Affected: 1.6.4 |
| CVE-2023-48881 | 4.8 | Nov 29 | A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the… Affected: 1.6.4 |
| CVE-2023-48880 | 4.8 | Nov 29 | A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu… Affected: 1.6.4 |
| CVE-2023-34657 | 4.8 | Jun 19 | A stored cross-site scripting (XSS) vulnerability in Eyoucms v1.6.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the web_recordnum… Affected: 1.6.2 |