Description
Evolution CMS 1.4.x allows XSS via the manager/ search parameter.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | evolutioncms/evolution | >= 1.4.0, < 1.4.6 | 1.4.6 | GHSA-9mfc-gr8c-xj4m |
Medium · 5.4
CVE-2018-16638
EUVD-2022-3414GHSA-9mfc-gr8c-xj4m
Evolution CMS Cross-site Scripting (XSS)
Published Dec 28, 2018 · Updated Aug 5, 2024 · Assigned by mitre