Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

evolutioncms/evolution

4 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4
Registry
Packagist

Advisories 4

  • Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload…

    Affected: through 3.2.3.

  • Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload…

    Affected: through 3.2.3.

  • Evolution CMS 1.4.x allows XSS via the manager/ search parameter.

    Affected: from 1.4.0, fixed in 1.4.6.

  • Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI.

    Affected: from 1.4, fixed in 1.4.6.