Secbridge

**Name of the Vulnerable Software and Affected Versions** EyouCMS version 1.6.5-UTF8-SP1 **Description** A stored cross-site scripting (XSS) issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the `Public Security Registration Number` parameter. This enables attackers to potentially manipulate website content or steal user data. **Recommendations** For EyouCMS version 1.6.5-UTF8-SP1, consider restricting input to the `Public Security Registration Number` parameter to prevent malicious payloads until a patch is available. As a temporary workaround, validate and sanitize all user input to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.