Skip to content
OpenAdvisories

Product · Evo

Evolution CMS

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2021-47939

    Evolution CMS 3.1.6 Authenticated Remote Code Execution via Module Creation

    Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation permissions to execute arbitrary system commands by injecting PHP code into module parameters. Attackers can send POST requests to /manager…

    Evo Evolution CMS