Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Evo Clear all filters
TI-2021-22552 CVE-2021-47939 · GHSA-w3hh-x22g-mhjw

Evolution CMS 3.1.6 Authenticated Remote Code Execution via Module Creation

Priority HIGH 73

Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation permissions to execute arbitrary system commands by injecting PHP code into module parameters.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00638 Published 2026-05-10 No fix listed CWE-94
TI-2023-23200 CVE-2023-43340 · GHSA-432f-967f-vxg4

Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to…

Priority MEDIUM 57

Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected into the cmsadmin, cmsadminemail, cmspassword and cmspasswordconfim parameter…

CVSS 3.1MEDIUM 5.2 Local Low privileges No interaction EPSS 0.0049 Published 2023-10-19 No fix listed CWE-79