.. / CVE-2024-22927

• XSS
• Nuclei
• Web

Exploit for eyoucms v.1.6.5 - Cross-Site Scripting (CVE-2024-22927)

Description:

Cross Site Scripting (XSS) vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL.

Nuclei Template

View the template here CVE-2024-22927.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2024/CVE-2024-22927.yaml

References: