Description
Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | evolutioncms/evolution | >= 1.4, < 1.4.6 | 1.4.6 | GHSA-8h24-3cjr-xxmh |
Medium · 5.4
CVE-2018-16637
EUVD-2022-3180GHSA-8h24-3cjr-xxmh
Evolution CMS Stored Cross-site Scripting (XSS)
Published Dec 28, 2018 · Updated Aug 5, 2024 · Assigned by mitre