9.1
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Description
XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST request.
AI Analysis
XML external entity (XXE) injection vulnerability in eyoucms v1.7.1 allowing remote denial of service via crafted POST request
Basic Information
ID
CVE-2025-65868
Source
mitre
Published
Dec 3, 2025 at 00:00
Modified
Dec 5, 2025 at 20:09
Affected Product
Vendor
weng-xianhu
Product
eyoucms
Version
1.7.1
Affected Versions
n/a n/a n/a
CWE Classification
AI Assessment
AI Score
9.1 / 10
AI Severity
Critical
Vendor
weng-xianhu
Product
eyoucms
Version
1.7.1