PT-2018-13665

Name of the Vulnerable Software and Affected Versions Evolution CMS versions 1.4.0 through 1.4.5 Description The issue allows for XSS via the manager/ API endpoint, specifically through the search parameter. This can potentially lead to malicious script execution. Recommendations For Evolution CM...