Lucene search

Evolution Cms Security Vulnerabilities - 2023

cve

CVE-2023-43340

Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected into the cmsadmin, cmsadminemail, cmspassword and cmspasswordconfim parameters

5.2CVSS

5.2AI Score

0.0004EPSS

2023-10-19 11:15 PM

cve

CVE-2023-43341

Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected uid parameter.

6.1CVSS

6AI Score

0.001EPSS

2023-10-19 10:15 PM