Approved changes feed: RSS · Atom

cpe:2.3:a:eyoucms:eyoucms:1.6.3:*:*:*:*:*:*:*

part: a version: 1.6.3 update: *

VendorEyoucms (011ad8bf-7155-54e5-8b23-068968a64e42)
ProductEyoucms (205acdda-c1cf-5d3b-add2-9213f68710dd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/eyoucms/eyoucms purl2cpe 2026-06-01 10:11:47.978192

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-37645 vulnerable 2026-06-08 06:08:15.841343 Details available
eyoucms v1.6.3 was discovered to contain an information disclosure vulnerability via the component /custom_model_path/recruit.filelist.txt.
Published: 2023-07-20T00:00:00.000Z
Updated: 2024-10-24T19:45:53.164Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37136 vulnerable 2026-06-08 06:08:14.811581 Details available
A stored cross-site scripting (XSS) vulnerability in the Basic Website Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Published: 2023-07-06T00:00:00.000Z
Updated: 2024-11-19T17:07:14.141Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37135 vulnerable 2026-06-08 06:08:14.811290 Details available
A stored cross-site scripting (XSS) vulnerability in the Image Upload module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Published: 2023-07-06T00:00:00.000Z
Updated: 2024-11-19T17:09:48.727Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37134 vulnerable 2026-06-08 06:08:14.810768 Details available
A stored cross-site scripting (XSS) vulnerability in the Basic Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Published: 2023-07-06T00:00:00.000Z
Updated: 2024-11-19T17:10:48.171Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37133 vulnerable 2026-06-08 06:08:14.810480 Details available
A stored cross-site scripting (XSS) vulnerability in the Column management module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Published: 2023-07-06T00:00:00.000Z
Updated: 2024-11-19T17:11:15.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37132 vulnerable 2026-06-08 06:08:14.810102 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36093 vulnerable 2026-06-08 06:06:28.555254 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.