CVE-2023-37134

MediumCVSS 5.4

Published: 06/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

24th percentile - higher than 24% of all known CVEs

Summary

A stored cross-site scripting (XSS) vulnerability in the Basic Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

Risk Assessment

This vulnerability may lead to user data theft, session hijacking, or other unauthorized actions on the website.

Recommendation

It is recommended to update eyoucms to the latest version to mitigate this vulnerability and implement appropriate input sanitization filters.

Original NVD description (English source)

A stored cross-site scripting (XSS) vulnerability in the Basic Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.