EyouCMS Ask Module Ask.php cross site scripting_CVE-2025-15374

5.1 / 10

MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Description

A vulnerability was detected in EyouCMS up to 1.7.7. The affected element is an unknown function of the file application/home/model/Ask.php of the component Ask Module. Performing manipulation of the argument content results in cross site scripting. The attack can be initiated remotely. The exploit is now public and may be used. The vendor is "[a]cknowledging the existence of the vulnerability, we have completed the fix and will release a new version, v1.7.8".

Basic Information

ID CVE-2025-15374

Source VulDB

Published Dec 31, 2025 at 04:32

Affected Product

Vendor n/a

Product EyouCMS

Version 1.7.0

Affected Versions n/a EyouCMS 1.7.0
n/a EyouCMS 1.7.1
n/a EyouCMS 1.7.2
n/a EyouCMS 1.7.3
n/a EyouCMS 1.7.4
n/a EyouCMS 1.7.5
n/a EyouCMS 1.7.6
n/a EyouCMS 1.7.7

CWE Classification

CWE-79 CWE-94

References

{
    "lastseen": "",
    "description": "A vulnerability was detected in EyouCMS up to 1.7.7. The affected element is an unknown function of the file application/home/model/Ask.php of the component Ask Module. Performing manipulation of the argument content results in cross site scripting. The attack can be initiated remotely. The exploit is now public and may be used. The vendor is \"[a]cknowledging the existence of the vulnerability, we have completed the fix and will release a new version, v1.7.8\".",
    "published": "2025-12-31T04:32:08.144Z",
    "modified": "2025-12-31T04:32:08.144Z",
    "type": "cve",
    "title": "EyouCMS Ask Module Ask.php cross site scripting",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.339082\nhttps://vuldb.com/?ctiid.339082\nhttps://vuldb.com/?submit.718480\nhttps://note-hxlab.wetolink.com/share/LNickWiRaFiF\nhttps://note-hxlab.wetolink.com/share/LNickWiRaFiF#-span--strong-proof-of-concept---strong---span-",
    "id": "CVE-2025-15374",
    "bulletinFamily": "",
    "cwe": [
        "CWE-79",
        "CWE-94"
    ],
    "cvelist": null,
    "sourceData": "n/a EyouCMS 1.7.0\nn/a EyouCMS 1.7.1\nn/a EyouCMS 1.7.2\nn/a EyouCMS 1.7.3\nn/a EyouCMS 1.7.4\nn/a EyouCMS 1.7.5\nn/a EyouCMS 1.7.6\nn/a EyouCMS 1.7.7",
    "sourceHref": "",
    "cvss": {
        "score": 5.1,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "EyouCMS",
    "version": "1.7.0",
    "vendor": "n/a",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}