CVE-2025-15374 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was detected in EyouCMS up to 1.7.7. The affected element is an unknown function of the file application/home/model/Ask.php of the component Ask…
Medium CVSS: 5.1

CVE-2025-15374

A vulnerability was detected in EyouCMS up to 1.7.7. The affected element is an unknown function of the file application/home/model/Ask.php of the component Ask Module. Performing a manipulation of the argument content results in cross site scripting. The attack can be initiated remotely. The exploit is now public and may be used. The vendor is "[a]cknowledging the existence of the vulnerability, we have completed the fix and will release a new version, v1.7.8".
Vendor
Eyoucms
Product
Eyoucms
CWE
CWE-79
Yayın Tarihi
2025-12-31 05:16:03
Güncelleme
2026-02-24 07:17:08
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-79 Eyoucms MEDIUM Eyoucms 2025

Referanslar

https://note-hxlab.wetolink.com/share/LNickWiRaFiF https://note-hxlab.wetolink.com/share/LNickWiRaFiF#-span--strong-proof-of-concept---strong---span- https://vuldb.com/?ctiid.339082 https://vuldb.com/?id.339082 https://vuldb.com/?submit.718480 https://note-hxlab.wetolink.com/share/LNickWiRaFiF https://note-hxlab.wetolink.com/share/LNickWiRaFiF#-span--strong-proof-of-concept---strong---span-