CVE-2023-37136

MediumCVSS 5.4

Published: 06/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

24th percentile - higher than 24% of all known CVEs

Summary

A stored cross-site scripting (XSS) vulnerability in the Basic Website Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

Risk Assessment

This vulnerability may lead to account takeover and data theft, posing a significant security risk to the organization.

Recommendation

It is recommended to update eyoucms to the latest version to mitigate this vulnerability and implement additional security measures such as input validation.

Original NVD description (English source)

A stored cross-site scripting (XSS) vulnerability in the Basic Website Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.