EyouCms V1.6.1-UTF8-sp1 is vulnerable to Cross Site Scripting (XSS).
cpe:2.3:a:eyoucms:eyoucms:1.6.1-utf8-sp1:*:*:*:*:*:*:*
91E07F04-0ABB-44F1-AAA5-E4E8E7B3DE92
OR
Version： V1.6.1-UTF8-sp1

![image](https://user-images.githubusercontent.com/47726460/227478224-441945d3-d648-4a98-b416-db5ce54559b7.png)

1. Go to the background  --> Advertising management -->Add new ads
2. Then fill in the payload " <style onload=alert(document.cookie) />"in the ad content.
![image](https://user-images.githubusercontent.com/47726460/227478341-8faf4966-5b7a-4e61-857f-c997a9813bba.png)


Open the tab Invocation and copy the invocation link,

![image](https://user-images.githubusercontent.com/47726460/227478402-e535d3d0-112a-479a-b35e-38cfa753d5e0.png)
![image](https://user-images.githubusercontent.com/47726460/227478438-4ccb26e8-b421-4b13-9299-43bfd32f770b.png)

Access link,Causes XSS to steal sensitive information of logged-in users

![image](https://user-images.githubusercontent.com/47726460/227478493-73d924a3-60aa-49b2-8f7a-a9c5bdc43e0e.png)
There is a xss causes XSS to steal sensitive information of logged-in users
This is a GitHub Issue
repo:eyoucms
owner:weng-xianhu
Title : There is a xss causes XSS to steal sensitive information of logged-in users
Issue date:

--- start body ---
Version： V1.6.1-UTF8-sp1

![image](https://user-images.githubusercontent.com/47726460/227478224-441945d3-d648-4a98-b416-db5ce54559b7.png)

1. Go to the background  --> Advertising management -->Add new ads
2. Then fill in the payload " <style onload=alert(document.cookie) />"in the ad content.
![image](https://user-images.githubusercontent.com/47726460/227478341-8faf4966-5b7a-4e61-857f-c997a9813bba.png)


Open the tab Invocation and copy the invocation link,

![image](https://user-images.githubusercontent.com/47726460/227478402-e535d3d0-112a-479a-b35e-38cfa753d5e0.png)
![image](https://user-images.githubusercontent.com/47726460/227478438-4ccb26e8-b421-4b13-9299-43bfd32f770b.png)

Access link,Causes XSS to steal sensitive information of logged-in users

![image](https://user-images.githubusercontent.com/47726460/227478493-73d924a3-60aa-49b2-8f7a-a9c5bdc43e0e.png)
--- end body ---

comments :
--- start comments ---

--- end comments ---