Vulnerabilities

TI-2019-10819 CVE-2019-14518 · GHSA-xr7r-38qp-crjh

Evolution CMS 2.0.x allows XSS via a description and new category location in a template.

LOW 27

Evolution CMS 2.0.x allows XSS via a description and new category location in a template.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01226 Published 2019-08-15 No fix listed CWE-79

TI-2018-11925 CVE-2018-16638 · GHSA-9mfc-gr8c-xj4m

LOW 25

Evolution CMS 1.4.x allows XSS via the manager/ search parameter.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00575 Published 2018-12-28 Fixed in 1.4.6 CWE-79

TI-2018-11924 CVE-2018-16637 · GHSA-8h24-3cjr-xxmh

LOW 25

Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0057 Published 2018-12-28 Fixed in 1.4.6 CWE-79