Read the docs

Evo

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Evo records in CISA KEV

No Evo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Evolution Cms 3 records MEDIUM

Records

4 records

TI-2021-22552 CVE-2021-47939 · GHSA-w3hh-x22g-mhjw

Evolution CMS 3.1.6 Authenticated Remote Code Execution via Module Creation

Priority HIGH 73

Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation permissions to execute arbitrary system commands by injecting PHP code into module parameters.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00638 Published 2026-05-10 No fix listed CWE-94
TI-2023-23200 CVE-2023-43340 · GHSA-432f-967f-vxg4

Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to…

Priority MEDIUM 57

Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected into the cmsadmin, cmsadminemail, cmspassword and cmspasswordconfim parameter…

CVSS 3.1MEDIUM 5.2 Local Low privileges No interaction EPSS 0.0049 Published 2023-10-19 No fix listed CWE-79
Open these records in search →