CVE-2023-37134

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Jul 6, 2023
Updated: Jul 11, 2023
CWE ID 79

Summary

CVE-2023-37134 is a stored cross-site scripting (XSS) vulnerability affecting the Basic Information module of eyoucms version 1.6.3. This issue allows attackers to inject arbitrary web scripts or HTML code into the application by manipulating the input data. Successful exploitation could lead to unauthorized access to user information or a complete takeover of the affected system. It is critical that users upgrade to the latest version of eyoucms to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future

Note: This is just a basic overview providing quick insights into CVE-2023-37134 information. Gain full access to comprehensive CVE data, third party vulnerabilities, compromised credentials and more with Recorded Future
  • Gain complete coverage of your cyber, third party, and physical attack surface
  • Proactively mitigate threats before they turn into costly attacks
  • Make fast, effective, data-driven decisions