CVE-2025-52335 identifies a Cross Site Scripting (XSS) vulnerability in EyouCMS version 1.7.3, specifically within the index.php component. This vulnerability enables attackers to inject and execute arbitrary scripts, which can be used to steal sensitive information from users interacting with the affected system. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges but requires user interaction, and it impacts confidentiality and integrity with no effect on availability.

Successful exploitation of this XSS vulnerability could lead to unauthorized disclosure of sensitive information and potential manipulation of data integrity within the affected application. There is no indication of impact on system availability. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix is provided in the available data, users should monitor vendor communications for updates. Until a fix is available, consider applying input validation and output encoding controls to mitigate XSS risks in the affected component.