6 matches found
EUVD-2022-3180
Malicious code in bioql PyPI...
GHSA-8H24-3CJR-XXMH Evolution CMS Stored Cross-site Scripting (XSS)
Evolution CMS 1.4.x prior to 1.4.6 allows XSS via the page weblink title parameter to the manager/ URI...
Evolution CMS Cross-Site Scripting Vulnerability (CNVD-2019-03273)
Evolution CMS is a content management system CMS. A cross-site scripting vulnerability exists in Evolution CMS version 1.4.x, which can be exploited by remote attackers to inject arbitrary web script or HTML by sending the 'page weblink title' parameter to the manager/ URI...
Cross site scripting
Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI...
CVE-2018-16637: Improper Neutralization of Input During Web Page Generation
Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI...
PT-2018-13664
Name of the Vulnerable Software and Affected Versions Evolution CMS versions 1.4.0 through 1.4.5 Description The issue allows for XSS via the page weblink title parameter to the "manager/" URI. This can be exploited to execute malicious scripts. Recommendations For Evolution CMS versions 1.4.0...