← Database

CVE-2021-39428

MEDIUM CVSS: 5.4 Published: 2022-12-15 Modified: 2026-06-17

Description

Cross Site Scripting (XSS) vulnerability in Users.php in eyoucms 1.5.4 allows remote attackers to run arbitrary code and gain escalated privilege via the filename for edit_users_head_pic.

Affected Platforms

Eyoucms Eyoucms

Weakness Type

CWE-79, CWE-79

References