2025-12-03 00:00:00
mitre
PUBLISHED
XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST request.