CVE-2023-37135

MediumCVSS 5.4

Published: 06/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

21th percentile - higher than 21% of all known CVEs

Summary

A stored cross-site scripting (XSS) vulnerability in the Image Upload module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

Risk Assessment

This vulnerability may lead to account takeover and data theft, posing a significant security risk to the organization.

Recommendation

It is recommended to update eyoucms to the latest version to mitigate this vulnerability and conduct a security audit of the application.

Original NVD description (English source)

A stored cross-site scripting (XSS) vulnerability in the Image Upload module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.