CVE-2023-36093

MediumCVSS 5.4

Published: 22/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

25th percentile - higher than 25% of all known CVEs

Summary

EyouCMS version 1.6.3 has a cross site scripting (XSS) vulnerability in the filing number on the backend management page under the Basic Information tab.

Risk Assessment

An attacker could exploit this vulnerability to inject malicious code, potentially leading to data theft or session hijacking.

Recommendation

It is recommended to update EyouCMS to the latest version to mitigate this vulnerability and review application security.

Original NVD description (English source)

There is a storage type cross site scripting (XSS) vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3