CVE Catalog

CVE-2023-33492

MediumCVSS 5.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.34%

26th percentile - higher than 26% of all known CVEs

Summary

EyouCMS version 1.6.2 is vulnerable to Cross Site Scripting (XSS) attacks, which may allow attackers to inject malicious code into the application.

Risk Assessment

Exploitation of this vulnerability could lead to user data theft and session hijacking, posing a serious threat to organizational security.

Recommendation

It is recommended to update EyouCMS to the latest version to eliminate this vulnerability and implement additional protections against XSS attacks.

Original NVD description (English source)

EyouCMS 1.6.2 is vulnerable to Cross Site Scripting (XSS).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS