CVE-2023-43341
Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected uid parameter.
Published Updated
PatchFirst · Latest vulnerabilities
evolutioncms/evolution vulnerabilities
Vulnerabilities published for evolutioncms/evolution in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 4
CVE-2023-43340
Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected into the cmsadmin, cmsadminemail, cmspassword and cmspasswordconfim parameters
Published UpdatedCVE-2018-16638
Evolution CMS 1.4.x allows XSS via the manager/ search parameter.
- Update to 1.4.6
Published UpdatedCVE-2018-16637
Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI.
- Update to 1.4.6
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.