Evolution CMS Cross-Site Scripting Vulnerability

Evolution CMS is an open source PHP-based content management system CMS. A security vulnerability exists in Evolution CMS version v.3.2.3, which stems from a cross-site scripting XSS vulnerability in several parameters such as cmsadmin, cmsadminmail, and others...

GHSA-9MFC-GR8C-XJ4M Evolution CMS Cross-site Scripting (XSS)

Evolution CMS 1.4.x prior to 1.4.6 allows XSS via the manager/ search parameter...

GHSA-8H24-3CJR-XXMH Evolution CMS Stored Cross-site Scripting (XSS)

Evolution CMS 1.4.x prior to 1.4.6 allows XSS via the page weblink title parameter to the manager/ URI...

Evolution CMS Cross-site Scripting (XSS)

Evolution CMS 1.4.x prior to 1.4.6 allows XSS via the manager/ search parameter...

Evolution CMS Stored Cross-site Scripting (XSS)

Evolution CMS 1.4.x prior to 1.4.6 allows XSS via the page weblink title parameter to the manager/ URI...

PT-2022-1622

Name of the Vulnerable Software and Affected Versions Evolution CMS affected versions not specified Description The issue is related to the lack of protection for the web page structure in the content management system, allowing a remote attacker to perform cross-site scripting XSS attacks...

Evolution CMS 3.1.6 - Remote Code Execution (Authenticated) Exploit

Exploit Title: Evolution CMS 3.1.6 - Remote Code Execution RCE Authenticated Exploit Author: Halit AKAYDIN hLtAkydn Vendor Homepage: https://evo.im/ Software Link: https://github.com/evolution-cms/evolution/releases Version: 3.1.6 Category: Webapps Tested on: Linux/Windows Example: python3...

Evolution CMS 3.1.6 Remote Code Execution

Exploit Title: Evolution CMS 3.1.6 - Remote Code Execution RCE Authenticated Date: 15-09-2021 Exploit Author: Halit AKAYDIN hLtAkydn Vendor Homepage: https://evo.im/ Software Link: https://github.com/evolution-cms/evolution/releases Version: 3.1.6 Category: Webapps Tested on: Linux/Windows Exampl...

Evolution CMS 3.1.6 - Remote Code Execution (RCE) (Authenticated)

Exploit Title: Evolution CMS 3.1.6 - Remote Code Execution RCE Authenticated Date: 15-09-2021 Exploit Author: Halit AKAYDIN hLtAkydn Vendor Homepage: https://evo.im/ Software Link: https://github.com/evolution-cms/evolution/releases Version: 3.1.6 Category: Webapps Tested on: Linux/Windows Exampl...

CVE-2020-23238

Cross Site Scripting XSS vulnerability in Evolution CMS 2.0.2 via the Document Manager feature...

CVE-2020-23238

Cross Site Scripting XSS vulnerability in Evolution CMS 2.0.2 via the Document Manager feature...

Cross site scripting

Cross Site Scripting XSS vulnerability in Evolution CMS 2.0.2 via the Document Manager feature...

CVE-2020-23238

Cross Site Scripting XSS vulnerability in Evolution CMS 2.0.2 via the Document Manager feature...

CVE-2020-23238

CVE-2020-23238 affects Evolution CMS 2.0.2, with a Cross Site Scripting (XSS) vulnerability exposed via the Document Manager feature . The connected records corroborate the vulnerability across multiple sources, consistently describing an XSS issue in that version; no details on exploitation, aff...

PT-2021-10863

Name of the Vulnerable Software and Affected Versions Evolution CMS version 2.0.2 Description The issue is a Cross Site Scripting XSS vulnerability via the Document Manager feature. This allows for malicious scripts to be injected into the website, potentially leading to unauthorized access or...

CVE-2020-23238: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Evolution CMS 2.0.2 via the Document Manager feature...

CVE-2019-14518

Evolution CMS 2.0.x allows XSS via a description and new category location in a template. NOTE: the vendor states that the behavior is consistent with the "access policy in the administration panel...

CVE-2019-14518

Evolution CMS 2.0.x allows XSS via a description and new category location in a template. NOTE: the vendor states that the behavior is consistent with the "access policy in the administration panel...

Cross site scripting

DISPUTED Evolution CMS 2.0.x allows XSS via a description and new category location in a template. NOTE: the vendor states that the behavior is consistent with the "access policy in the administration panel."...

CVE-2019-14518

Evolution CMS 2.0.x allows XSS via a description and new category location in a template. NOTE: the vendor states that the behavior is consistent with the "access policy in the administration panel...