5.4
CVSSv3

CVE-2021-39428

Published: 15/12/2022 Updated: 19/12/2022
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 0

Vulnerability Summary

Cross Site Scripting (XSS) vulnerability in Users.php in eyoucms 1.5.4 allows remote malicious users to run arbitrary code and gain escalated privilege via the filename for edit_users_head_pic.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

eyoucms eyoucms 1.5.4