Cross Site Scripting (XSS) vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL.
- https://github.com/weng-xianhu/eyoucms/issues/57
No PoCs found on GitHub currently.