Cross-site Scripting (XSS)

evolutioncms/evolution is vulnerable to Cross-site Scripting XSS. An attacker could exploit this vulnerability by injecting a crafted payload into the cmsadmin, cmsadminemail, cmspassword and cmspasswordconfim parameters, resulting in XSS...

Cross Site Scripting

evolutioncms is vulnerable to Cross Site Scripting. The vulnerability is due to improper sanitization of uid parameter. The attacker can exploit this issue by injecting malicious Javascript into the web page via uid parameter...