CVE-2023-2058

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in EyouCms up to 1.6.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /yxcms/index.php?r=admin/extendfield/mesedit&tabid=12&id=4 of the component HTTP POST Request Handler. The manipulation of the argument web_ico leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225943.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Apr 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-205812.5Improper access control in the IOMMU may allow a privileged attacker to bypass RMP checks, potentially leading to a loss of guest memory int CVE-2023-205825.3Improper handling of invalid nested page table entries in the IOMMU may allow a privileged attacker to induce page table entry (PTE) faults CVE-2023-205834.7A potential power side-channel vulnerability in AMD processors may allow an authenticated attacker to monitor the CPU power consumption as t CVE-2023-205846.0IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privilege CVE-2023-205855.6Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger CVE-2023-205869.8A potential vulnerability was reported in Radeon™ Software Crimson ReLive Edition which may allow escalation of privilege. Radeon™ Software CVE-2023-205877.1Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leading to arbitrary code CVE-2023-205885.5A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.CVE-2023-205896.8An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resu CVE-2023-20595.3A vulnerability was found in DedeCMS 5.7.87. It has been rated as problematic. Affected by this issue is some unknown functionality of the f CVE-2023-2059110.0Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to CVE-2023-205926.5Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache l