CVE-2021-39500: Eyoucms

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Eyoucms 1.5.4 is vulnerable to Directory Traversal. Due to a lack of input data sanitizaton in param tpldir, filename, type, nid an attacker can inject "../" to escape and write file to writeable directories.

Affected products

• Eyoucms Eyoucms: version 1.5.4 only

Published 2021-09-07. Last modified 2026-06-17.