CVE-2021-39428

n/a / n/a PUBLISHED

Description (CNA)

Cross Site Scripting (XSS) vulnerability in Users.php in eyoucms 1.5.4 allows remote attackers to run arbitrary code and gain escalated privilege via the filename for edit_users_head_pic.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/eyoucms/eyoucms/issues/14

ADP enrichment

CVE

No English description supplied.

https://github.com/eyoucms/eyoucms/issues/14

CISA-ADP

No English description supplied.

No references supplied.