CVE-2025-15373

A security vulnerability has been detected in EyouCMS up to 1.7.7. Impacted is the function saveRemote of the file application/function.php. Such manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor is "[a]cknowledging the existence of the vulnerability, we have completed the fix and will release a new version, v1.7.8".

We have discovered 1,103 live websites that are affected by CVE-2025-15373.

Run a Free Instant Scan

Affected Software

Product	eyouCMS
Category	Content Management System
Vulnerable Domains	1,103 live websites (18% of eyouCMS install base)
Vulnerable Versions	from 1.7 through 1.7 from 1.7.1 through 1.7.1 from 1.7.2 through 1.7.2 from 1.7.3 through 1.7.3 from 1.7.4 through 1.7.4 from 1.7.5 through 1.7.5 from 1.7.6 through 1.7.6 from 1.7.7 through 1.7.7
Vulnerable Versions Count	8 versions ( 31% of all versions)