CVE-2023-37135

Summary

CVE-2023-37135 is a stored cross-site scripting (XSS) vulnerability affecting the Image Upload module in version 1.6.3 of eyoucms. Malicious actors can exploit this flaw by injecting malicious scripts or HTML code into uploaded images, which are then stored and served to other users visiting the compromised website, potentially leading to data theft or unauthorized system access. The vulnerability grants attackers the ability to execute arbitrary code within the user's browser, posing a significant risk to the integrity and confidentiality of the affected system. Users are advised to upgrade their eyoucms installation to a patched version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.