Evo

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Evo records in CISA KEV

No Evo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Evolution Cms 3 records MEDIUM

Records

3 records in Evolution Cms · all components

TI-2023-23201 CVE-2023-43341 · GHSA-5h47-9rm5-fx3f

Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker…

MEDIUM 60

Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected uid parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00621 Published 2023-10-19 No fix listed CWE-79

TI-2023-23200 CVE-2023-43340 · GHSA-432f-967f-vxg4

Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to…

MEDIUM 57

Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected into the cmsadmin, cmsadminemail, cmspassword and cmspasswordconfim parameter…

CVSS 3.1MEDIUM 5.2 Local Low privileges No interaction EPSS 0.0049 Published 2023-10-19 No fix listed CWE-79

TI-2020-14493 CVE-2020-23238 · GHSA-c557-rv2v-w3c8

Cross Site Scripting (XSS) vulnerability in Evolution CMS 2.0.2 via the Document Manager feature.

LOW 25

Cross Site Scripting (XSS) vulnerability in Evolution CMS 2.0.2 via the Document Manager feature.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00503 Published 2021-07-26 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0