cve/CVE-2024-23031.md at 4edef1e4c8c71572b001933b68c0e9d801ec9035 - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-11-28 18:48:49 +00:00

marc 555e9c7de4 Update Sat May 25 21:48:12 CEST 2024

2024-05-25 21:48:12 +02:00

616 B

Raw Blame History

CVE-2024-23031

Description

Cross Site Scripting (XSS) vulnerability in is_water parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL.

POC

Reference

https://github.com/weng-xianhu/eyoucms/issues/57

Github

No PoCs found on GitHub currently.