CVE-2022-26263

MediumCVSS 6.1

Published: 25/03/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

41.45%

99th percentile - higher than 99% of all known CVEs

Summary

Yonyou u8 v13.0 was found to contain a DOM-based cross-site scripting (XSS) vulnerability via the /u8sl/WebHelp component. An attacker can inject a malicious script that executes in the victim's browser.

Risk Assessment

The risk includes session hijacking, data theft, or unauthorized actions performed within the context of the affected user's account.

Recommendation

Immediately update Yonyou u8 to the latest version and apply input filters for parameters passed to the /u8sl/WebHelp component.

Original NVD description (English source)

Yonyou u8 v13.0 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability via the component /u8sl/WebHelp.