CVE-2023-37133

MediumCVSS 5.4

Published: 06/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

21th percentile - higher than 21% of all known CVEs

Summary

A stored cross-site scripting (XSS) vulnerability in the Column management module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

Risk Assessment

This vulnerability may lead to user data theft or session hijacking, posing a significant security risk to the application and its users.

Recommendation

It is recommended to update eyoucms to the latest version to mitigate this vulnerability and conduct a security audit of the application.

Original NVD description (English source)

A stored cross-site scripting (XSS) vulnerability in the Column management module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.