← Database

CVE-2022-35509

MEDIUM CVSS: 5.4 Published: 2022-08-10 Modified: 2026-06-23

Description

An issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an attacker to execute arbitrary Web scripts or HTML by injecting a special payload via the title parameter in the foreground contribution, allowing the attacker to obtain sensitive information.

Affected Platforms

Eyoucms Eyoucms

Weakness Type

CWE-79, CWE-80

References