PatchTheCVEeyoucms vulnerabilities and fixes
Recent CVEs affecting eyoucms, with upgrade or downgrade steps. 10 tracked.
eyoucms has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-01-18. Highest priority: CVE-2025-65868 (score 45/100).
- CVE-2025-15143 MEDIUM 4.7 UPGRADE A security flaw has been discovered in EyouCMS up to 1.7.6
- CVE-2025-52335 MEDIUM 6.1 DOWNGRADE EyouCMS 1.7.3 is vulnerale to Cross Site Scripting (XSS) in index.php, which can be exploited to obtain sensit
- CVE-2024-52680 MEDIUM 6.1 DOWNGRADE EyouCMS 1.6.7 is vulnerable to Cross Site Scripting (XSS) in /login.php?m=admin&c=System&a=web&lang=cn.
- CVE-2026-1107 MEDIUM 6.3 DOWNGRADE A weakness has been identified in EyouCMS up to 1.7.1/5.0
- CVE-2025-65868 HIGH 7.5 DOWNGRADE XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via
- CVE-2024-48196 HIGH 7.5 DOWNGRADE An issue in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to t
- CVE-2024-48195 MEDIUM 6.1 DOWNGRADE Cross Site Scripting vulnerability in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information
- CVE-2024-3431 MEDIUM 4.7 DOWNGRADE A vulnerability was found in EyouCMS 1.6.5
- CVE-2024-11211 MEDIUM 4.7 UPGRADE A vulnerability classified as critical has been found in EyouCMS up to 1.6.7
- CVE-2024-11210 MEDIUM 5.4 DOWNGRADE A vulnerability was found in EyouCMS 1.51
FAQ
How do I fix eyoucms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is eyoucms being exploited right now?
None of the tracked eyoucms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which eyoucms CVE should I patch first?
CVE-2025-65868 currently ranks highest (45/100): XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via.