CVE-2022-35509
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
A Storage XSS vulnerability was discovered in EyouCMS version 1.5.8, allowing an attacker to execute arbitrary web scripts or HTML by injecting a special payload via the title parameter in the frontend contribution form.
Risk Assessment
This vulnerability may lead to the disclosure of sensitive information, posing a serious threat to user data security.
Recommendation
It is recommended to update EyouCMS to the latest version and implement input filtering and validation in forms.
Original NVD description (English source)
An issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an attacker to execute arbitrary Web scripts or HTML by injecting a special payload via the title parameter in the foreground contribution, allowing the attacker to obtain sensitive information.