CVE-2023-2058

A vulnerability was found in EyouCms up to 1.6.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /yxcms/index.php?r=admin/extendfield/mesedit&tabid=12&id=4 of the component HTTP POST Request Handler. The manipulation of the argument web_ico leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225943.

• CWE-79

• https://github.com/sleepyvv/vul_report/blob/main/EYOUCMS/XSS2.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.225943Permissions Required, Third Party Advisory
• https://vuldb.com/?id.225943Permissions Required, Third Party Advisory
• https://github.com/sleepyvv/vul_report/blob/main/EYOUCMS/XSS2.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.225943Permissions Required, Third Party Advisory
• https://vuldb.com/?id.225943Permissions Required, Third Party Advisory

Published

Apr 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20571A race condition in System Management Mode (SMM) code may al…8.1
• CVE-2023-20572An observable timing discrepancy in the ASP could allow a pr…5.6
• CVE-2023-20573A privileged attacker can prevent delivery of debug exceptio…3.2
• CVE-2023-20575 A potential power side-channel vulnerability in some AMD pr…6.5
• CVE-2023-20578A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an att…6.4
• CVE-2023-20579Improper Access Control in the AMD SPI protection feature ma…6
• CVE-2023-20581Improper access control in the IOMMU may allow a privileged …2.5
• CVE-2023-20582Improper handling of invalid nested page table entries in th…5.3
• CVE-2023-20583A potential power side-channel vulnerability in AMD processo…4.7
• CVE-2023-20584IOMMU improperly handles certain special address ranges with…6
• CVE-2023-20585Insufficient checks of the RMP on host buffer access in IOMM…5.6
• CVE-2023-20586 A potential vulnerability was reported in Radeon™ Software …9.8